Lucene search

K
redhatRedHatRHSA-2015:2579
HistoryDec 08, 2015 - 4:09 p.m.

(RHSA-2015:2579) Critical: Red Hat JBoss BPM Suite 6.1.0 commons-collections security update

2015-12-0816:09:43
access.redhat.com
18

0.018 Low

EPSS

Percentile

88.4%

Apache Commons Collections is a library built upon Java JDK classes by
providing new interfaces, implementations and utilities.

It was found that the Apache commons-collections library permitted code
execution when deserializing objects involving a specially constructed
chain of classes. A remote attacker could use this flaw to execute
arbitrary code with the permissions of the application using the
commons-collections library. (CVE-2015-7501)

Further information about this security flaw may be found at:
https://access.redhat.com/solutions/2045023

All users of Red Hat JBoss BPM Suite 6.1.0 as provided from the Red Hat
Customer Portal are advised to apply this security update.