Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a crafted serialized object in a JMS ObjectMessage that is handled by the getObject function.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of     classes available on the classpath, which might allow remote authenticated users with permission to send     messages to deserialize arbitrary objects and execute arbitrary code by leveraging a crafted serialized     object in a JMS ObjectMessage that is handled by the getObject function. (CVE-2016-4974)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of
    classes available on the classpath, which might allow remote authenticated users with permission to send
    messages to deserialize arbitrary objects and execute arbitrary code by leveraging a crafted serialized
    object in a JMS ObjectMessage that is handled by the getObject function. (CVE-2016-4974)

ID	Name	Product	Family	Type	Severity
260804	Linux Distros Unpatched Vulnerability : CVE-2016-4974	Nessus	Misc.	Local	high
414221	SCA: security update for org.apache.qpid:qpid-jms-client (GHSA-f38p-mq64-h784)	Tenable Cloud Security	SCA Checks	Local	high
414221	SCA: security update for org.apache.qpid:qpid-jms-client (GHSA-f38p-mq64-h784)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2016-4974

high

Tenable Plugins

high

high

high