CVE-2021-20318
Assigner: redhat
Published: 2021-12-23T19:48:41
State: PUBLISHED
affected: product: Artemis in EAP 7
vendor: n/a
versions: status: affected
version: 7.3.9.GA, 7.4.0.GA
descriptions: value: The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.
problemTypes: descriptions: cweId: CWE-502
description: CWE-502
type: CWE