CVEvulnerability

CVE-2013-2165

7.5 HIGH Published 2013-07-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-07-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.

Affected configurations

• redhat jboss enterprise application platform 4.3.0 • redhat jboss enterprise application platform 5.0.0 • redhat jboss enterprise application platform 5.0.1 • redhat jboss enterprise application platform 5.1.0 • redhat jboss enterprise application platform 5.1.1 • redhat jboss enterprise application platform 5.1.2 • redhat jboss enterprise application platform 5.2.0 • redhat jboss enterprise brms platform 5.0.0 • redhat jboss enterprise brms platform 5.0.1 • redhat jboss enterprise brms platform 5.0.2 • redhat jboss enterprise brms platform 5.1.0 • redhat jboss enterprise brms platform 5.2.0 • redhat jboss enterprise brms platform 5.3.0 • redhat jboss enterprise brms platform 5.3.1 • redhat jboss enterprise portal platform 4.3.0 • redhat jboss enterprise portal platform 5.0.0 • redhat jboss enterprise portal platform 5.0.1 • redhat jboss enterprise portal platform 5.1.0 • redhat jboss enterprise portal platform 5.1.1 • redhat jboss enterprise portal platform 5.2.0 • redhat jboss enterprise portal platform 5.2.1 • redhat jboss enterprise portal platform 5.2.2 • redhat jboss enterprise soa platform 4.2.0 • redhat jboss enterprise soa platform 4.3.0 • redhat jboss enterprise soa platform 5.0.0 • redhat jboss enterprise soa platform 5.0.1 • redhat jboss enterprise soa platform 5.0.2 • redhat jboss enterprise soa platform 5.1.0 • redhat jboss enterprise soa platform 5.1.1 • redhat jboss enterprise soa platform 5.2.0 • redhat jboss enterprise soa platform 5.3.0 • redhat jboss enterprise soa platform 5.3.1 • redhat jboss enterprise web platform 5.1.0 • redhat jboss enterprise web platform 5.1.1 • redhat jboss enterprise web platform 5.1.2 • redhat jboss enterprise web platform 5.2.0 • redhat jboss operations network 1.0.0 • redhat jboss operations network 2.0.0 • redhat jboss operations network 2.0.1 • redhat jboss operations network 2.1.0 • redhat jboss operations network 2.2 • redhat jboss operations network 2.3 • redhat jboss operations network 2.3.1 • redhat jboss operations network 2.4 • redhat jboss operations network 2.4.1 • redhat jboss operations network 2.4.2 • redhat jboss operations network 3.0 • redhat jboss operations network 3.0.1 • redhat jboss operations network 3.1 • redhat jboss operations network 3.1.1 • redhat jboss operations network 3.1.2 • redhat jboss web framework kit (<= 2.2.0) • redhat jboss web framework kit 1.0.0 • redhat jboss web framework kit 1.1.0 • redhat jboss web framework kit 1.2.0 • redhat jboss web framework kit 2.0.0 • redhat jboss web framework kit 2.1.0 • redhat richfaces 3.1.0 • redhat richfaces 3.1.1 • redhat richfaces 3.1.2 … and 21 more

Related

Weakness · not in database (1)

References