Code execution vulnerabilities in Tibbo AggreGate.

Описание

Successful exploitation of the identified vulnerabilities may allow an attacker to execute arbitrary code and commands.

1. Unknown vulnerability at Ice Faces servlet allows remote attackers to upload and execute arbitrary Java code via a specially designed XML document;
2. Unknown vulnerability allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class.

Первичный источник обнаружения

Связанные продукты

• AggreGate

Список CVE

• CVE-2015-7912
  critical
• CVE-2015-7913
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com