CVEvulnerability

CVE-2016-7050

9.8 CRITICAL Published 2017-06-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-06-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-502

Description

SerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to execute arbitrary code.

Affected configurations

• redhat enterprise linux desktop 7.0 • redhat enterprise linux hpc node 7.0 • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 7.0

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References