CVE-2016-9585

Name of the Vulnerable Software and Affected Versions Red Hat JBoss EAP version 5

Description The issue concerns the deserialization of untrusted data in the JMX endpoint, specifically when it deserializes credentials passed to it. An attacker could exploit this, resulting in a denial of service attack.

Recommendations For Red Hat JBoss EAP version 5, consider restricting access to the JMX endpoint to minimize the risk of exploitation. As a temporary workaround, avoid using the JMX endpoint for deserializing credentials until a patch is available.