Description
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 10 Jun 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.