ByteOS Network

CVE Vulnerability Details :

CVE-2016-2170

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-12 Apr, 2016 | 14:00

Updated At-05 Aug, 2024 | 23:17

▼CVE Numbering Authority (CNA)

Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://ofbiz.apache.org/download.html#vulnerabilities	x_refsource_CONFIRM
https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_12_04	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035513	vdb-entry x_refsource_SECTRACK
https://issues.apache.org/jira/browse/OFBIZ-6726	x_refsource_CONFIRM
https://cwiki.apache.org/confluence/display/OFBIZ/The+infamous+Java+serialization+vulnerability	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/538034/100/0/threaded	mailing-list x_refsource_BUGTRAQ
https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_13_07	x_refsource_CONFIRM
http://packetstormsecurity.com/files/136639/Apache-OFBiz-13.07.02-13.07.01-Information-Disclosure.html	x_refsource_MISC
https://lists.apache.org/thread.html/r0d97a3b7a14777b9e9e085b483629d2774343c4723236d1c73f43ff0%40%3Cdev.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/reccf8c8a58337ce7c035495d3d82fbc549e97036a9789a2a7d9cccf6%40%3Cdev.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rec5e9fdcdca13099cfb29f632333f44ad1dd60d90f67b90434e4467a%40%3Cdev.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rc9bd0d3d794dc370bc70585960841868cb29b92dcc80552b84ca2599%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r3ee005dd767cd83f522719423f5e7dd316f168ddbd1dc51a13d4e244%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rbe512e5ccd6b11169c6379daa1234bc805f3d53c5a38224e956295ce%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42e36efb8d735%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST
https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST

Hyperlink: http://ofbiz.apache.org/download.html#vulnerabilities

Resource:

x_refsource_CONFIRM

Hyperlink: https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_12_04

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1035513

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://issues.apache.org/jira/browse/OFBIZ-6726

Resource:

x_refsource_CONFIRM

Hyperlink: https://cwiki.apache.org/confluence/display/OFBIZ/The+infamous+Java+serialization+vulnerability

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/archive/1/538034/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_13_07

Resource:

x_refsource_CONFIRM

Hyperlink: http://packetstormsecurity.com/files/136639/Apache-OFBiz-13.07.02-13.07.01-Information-Disclosure.html

Resource:

x_refsource_MISC

Hyperlink: https://lists.apache.org/thread.html/r0d97a3b7a14777b9e9e085b483629d2774343c4723236d1c73f43ff0%40%3Cdev.ofbiz.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/reccf8c8a58337ce7c035495d3d82fbc549e97036a9789a2a7d9cccf6%40%3Cdev.ofbiz.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/rec5e9fdcdca13099cfb29f632333f44ad1dd60d90f67b90434e4467a%40%3Cdev.ofbiz.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/rc9bd0d3d794dc370bc70585960841868cb29b92dcc80552b84ca2599%40%3Cnotifications.ofbiz.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/r3ee005dd767cd83f522719423f5e7dd316f168ddbd1dc51a13d4e244%40%3Cnotifications.ofbiz.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/rbe512e5ccd6b11169c6379daa1234bc805f3d53c5a38224e956295ce%40%3Cnotifications.ofbiz.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42e36efb8d735%40%3Cnotifications.ofbiz.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://ofbiz.apache.org/download.html#vulnerabilities	x_refsource_CONFIRM x_transferred
https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_12_04	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1035513	vdb-entry x_refsource_SECTRACK x_transferred
https://issues.apache.org/jira/browse/OFBIZ-6726	x_refsource_CONFIRM x_transferred
https://cwiki.apache.org/confluence/display/OFBIZ/The+infamous+Java+serialization+vulnerability	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/archive/1/538034/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
https://blogs.apache.org/ofbiz/entry/announce_apache_ofbiz_13_07	x_refsource_CONFIRM x_transferred
http://packetstormsecurity.com/files/136639/Apache-OFBiz-13.07.02-13.07.01-Information-Disclosure.html	x_refsource_MISC x_transferred
https://lists.apache.org/thread.html/r0d97a3b7a14777b9e9e085b483629d2774343c4723236d1c73f43ff0%40%3Cdev.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/reccf8c8a58337ce7c035495d3d82fbc549e97036a9789a2a7d9cccf6%40%3Cdev.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/rec5e9fdcdca13099cfb29f632333f44ad1dd60d90f67b90434e4467a%40%3Cdev.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/rc9bd0d3d794dc370bc70585960841868cb29b92dcc80552b84ca2599%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/r3ee005dd767cd83f522719423f5e7dd316f168ddbd1dc51a13d4e244%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/rbe512e5ccd6b11169c6379daa1234bc805f3d53c5a38224e956295ce%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42e36efb8d735%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST x_transferred
https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E	mailing-list x_refsource_MLIST x_transferred