Apache OFBiz SOAPService Deserialization RCE
Severity:
High
Summary
Apache OFBiz versions prior to 17.12.06 are vulnerable to a Java deserialization vulnerability that affects the unauthenticated SOAP endpoint /webtools/control/SOAPService. This vulnerability allows an attacker to execute arbitrary code on the affected system.
Impact
An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.
Remediation
Upgrade to the latest version of Apache OFBiz. This issue was fixed in version 17.12.06.
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Related Vulnerabilities
Build your resistance to threats. And save hundreds of hours each month.
