ByteOS Network

CVE Vulnerability Details :

CVE-2016-5019

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-03 Oct, 2016 | 18:00

Updated At-06 Aug, 2024 | 00:46

▼CVE Numbering Authority (CNA)

CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://mail-archives.apache.org/mod_mbox/myfaces-users/201609.mbox/%3CCAM1yOjYM%2BEW3mLUfX0pNAVLfUFRAw-Bhvkp3UE5%3DEQzR8Yxsfw%40mail.gmail.com%3E	mailing-list x_refsource_MLIST
http://www.securityfocus.com/bid/93236	vdb-entry x_refsource_BID
http://www.securitytracker.com/id/1037633	vdb-entry x_refsource_SECTRACK
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpujan2020.html	x_refsource_MISC
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM
http://packetstormsecurity.com/files/138920/Apache-MyFaces-Trinidad-Information-Disclosure.html	x_refsource_MISC
https://issues.apache.org/jira/browse/TRINIDAD-2542	x_refsource_CONFIRM

Hyperlink: http://mail-archives.apache.org/mod_mbox/myfaces-users/201609.mbox/%3CCAM1yOjYM%2BEW3mLUfX0pNAVLfUFRAw-Bhvkp3UE5%3DEQzR8Yxsfw%40mail.gmail.com%3E

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.securityfocus.com/bid/93236

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.securitytracker.com/id/1037633

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.oracle.com/security-alerts/cpujul2020.html

Resource:

x_refsource_MISC

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.oracle.com/security-alerts/cpujan2020.html

Resource:

x_refsource_MISC

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://packetstormsecurity.com/files/138920/Apache-MyFaces-Trinidad-Information-Disclosure.html

Resource:

x_refsource_MISC

Hyperlink: https://issues.apache.org/jira/browse/TRINIDAD-2542

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://mail-archives.apache.org/mod_mbox/myfaces-users/201609.mbox/%3CCAM1yOjYM%2BEW3mLUfX0pNAVLfUFRAw-Bhvkp3UE5%3DEQzR8Yxsfw%40mail.gmail.com%3E	mailing-list x_refsource_MLIST x_transferred
http://www.securityfocus.com/bid/93236	vdb-entry x_refsource_BID x_transferred
http://www.securitytracker.com/id/1037633	vdb-entry x_refsource_SECTRACK x_transferred
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	x_refsource_CONFIRM x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	x_refsource_CONFIRM x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM x_transferred
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC x_transferred
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	x_refsource_CONFIRM x_transferred
https://www.oracle.com/security-alerts/cpujan2020.html	x_refsource_MISC x_transferred
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	x_refsource_CONFIRM x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM x_transferred
http://packetstormsecurity.com/files/138920/Apache-MyFaces-Trinidad-Information-Disclosure.html	x_refsource_MISC x_transferred
https://issues.apache.org/jira/browse/TRINIDAD-2542	x_refsource_CONFIRM x_transferred