PT-2016-6204 · Apache · Apache Activemq Artemis

CVE-2016-4978

·

Publicado

2016-09-27

·

Atualizado

2026-06-15

CVSS v3.1

7.2

Alta

VetorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions prior to 1.4.0
Description The issue allows remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath. This is due to a problem in the getObject method of the javax.jms.ObjectMessage class in the JMS Core client, Artemis broker, and Artemis REST component.
Recommendations For Apache ActiveMQ Artemis versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the getObject method of the javax.jms.ObjectMessage class to minimize the risk of exploitation.

Exploit

Correção

DoS

Deserialization of Untrusted Data

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2016-4978
GHSA-R9VV-XJ4W-G8M8
RHSA-2017:1834
RHSA-2017:1835
RHSA-2017:1837
RHSA-2017:3454
RHSA-2017:3455
RHSA-2017:3458
RHSA-2018:1448
RHSA-2018:1449
RHSA-2018:1450
RHSA-2018:1451

Produtos afetados

Apache Activemq Artemis