ID de Prueba:	1.3.6.1.4.1.25623.1.0.882350
Categoría:	CentOS Local Security Checks
Título:	CentOS: Security Advisory for jakarta-commons-collections (CESA-2015:2671)
Resumen:	The remote host is missing an update for the 'jakarta-commons-collections'; package(s) announced via the CESA-2015:2671 advisory.
Descripción:	Summary: The remote host is missing an update for the 'jakarta-commons-collections' package(s) announced via the CESA-2015:2671 advisory. Vulnerability Insight: The Jakarta/Apache Commons Collections library provides new interfaces, implementations, and utilities to extend the features of the Java Collections Framework. It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections library. (CVE-2015-7501) With this update, deserialization of certain classes in the commons-collections library is no longer allowed. Applications that require those classes to be deserialized can use the system property 'org.apache.commons.collections.enableUnsafeSerialization' to re-enable their deserialization. Affected Software/OS: 'jakarta-commons-collections' package(s) on CentOS 5. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7501 BugTraq ID: 78215 http://www.securityfocus.com/bid/78215 http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html https://access.redhat.com/security/vulnerabilities/2059393 https://access.redhat.com/solutions/2045023 https://bugzilla.redhat.com/show_bug.cgi?id=1279330 https://www.oracle.com/security-alerts/cpujul2020.html RedHat Security Advisories: RHSA-2015:2500 http://rhn.redhat.com/errata/RHSA-2015-2500.html RedHat Security Advisories: RHSA-2015:2501 http://rhn.redhat.com/errata/RHSA-2015-2501.html RedHat Security Advisories: RHSA-2015:2502 http://rhn.redhat.com/errata/RHSA-2015-2502.html RedHat Security Advisories: RHSA-2015:2514 http://rhn.redhat.com/errata/RHSA-2015-2514.html RedHat Security Advisories: RHSA-2015:2516 http://rhn.redhat.com/errata/RHSA-2015-2516.html RedHat Security Advisories: RHSA-2015:2517 http://rhn.redhat.com/errata/RHSA-2015-2517.html RedHat Security Advisories: RHSA-2015:2521 http://rhn.redhat.com/errata/RHSA-2015-2521.html RedHat Security Advisories: RHSA-2015:2522 http://rhn.redhat.com/errata/RHSA-2015-2522.html RedHat Security Advisories: RHSA-2015:2524 http://rhn.redhat.com/errata/RHSA-2015-2524.html RedHat Security Advisories: RHSA-2015:2536 https://rhn.redhat.com/errata/RHSA-2015-2536.html RedHat Security Advisories: RHSA-2015:2670 http://rhn.redhat.com/errata/RHSA-2015-2670.html RedHat Security Advisories: RHSA-2015:2671 http://rhn.redhat.com/errata/RHSA-2015-2671.html RedHat Security Advisories: RHSA-2016:0040 http://rhn.redhat.com/errata/RHSA-2016-0040.html RedHat Security Advisories: RHSA-2016:1773 http://rhn.redhat.com/errata/RHSA-2016-1773.html http://www.securitytracker.com/id/1034097 http://www.securitytracker.com/id/1037052 http://www.securitytracker.com/id/1037053 http://www.securitytracker.com/id/1037640
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.