An Interest In:
Web News this Week
- April 19, 2024
- April 18, 2024
- April 17, 2024
- April 16, 2024
- April 15, 2024
- April 14, 2024
- April 13, 2024
Some of Our Sources
- Slashdot
- Mashable
- Spoon Graphics
- Smashing Magazine
- Fudge Graphics
- Web Design Ledger
- Design Modo
- Android Dissected
- Codrops
- Dev To
Help Webnuz
Referal links:
November 8, 2015 12:00 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/7znNkFmKPAE/vulnerability-in-java-commons-library-leads-to-hundreds-of-insecure-applications
Vulnerability In Java Commons Library Leads To Hundreds of Insecure Applications
An anonymous reader writes: Stephen Breen from the FoxGlove Security team is calling attention to what he calls the "most underrated, underhyped vulnerability of 2015." It's a remote code execution exploit that affects the latest versions of WebLogic, WebSphere, JBoss, Jenkins, and OpenMMS, and many other pieces of software. How? An extremely common Java library. He says, "No one gave it a fancy name, there were no press releases, nobody called Mandiant to come put out the fires. In fact, even though proof of concept code was released over 9 months ago, none of the products mentioned in the title of the blog post have been patched, along with many more. In fact no patch is available for the Java library containing the vulnerability. In addition to any commercial products that are vulnerable, this also affects many custom applications.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/7znNkFmKPAE/vulnerability-in-java-commons-library-leads-to-hundreds-of-insecure-applications
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot