New! Vulnerability Priority Rating (VPR)
Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.
VPR Score: 5.9
SynopsisThe remote JBoss Operations Network server is affected by a remote code execution vulnerability
DescriptionThe remote Red Hat JBoss Operations Network server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Jython library. An unauthenticated, remote attacker can exploit this, by sending specially crafted Java objects to the HTTP interface, to execute arbitrary code on the target host.
SolutionRed Hat has released JBoss Operations Network 3.3 Update 06 to address this issue; however, Tenable Research has confirmed that the update did not resolve the issue. To mitigate this issue, users should enable agent authentication.