Skip to content

CVE-2016-5062 The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

CriticalCVSS 9.8 EPSS 3.9%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

Affected products

ProductAffected versionsFixed in
aternity <= 9.0 No fix listed

References

  • VU#706359 third-party-advisory us-government-resource
  • 93208 vdb-entry