CVE:CVE-2013-6469
CNNVD:CNNVD-201404-429
JBoss Overlord Run Time Governance是美国JBoss公司的一套用于管理JBoss SOA平台的应用。
JBoss Overlord Run Time Governance 1.0版本存在代码注入漏洞。远程攻击者利用该漏洞执行任意Java代码。
solution:Upgrade redhat jboss_fuse_service_works to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat jboss_overlord_run_time_governance to a higher version than 1.0,and avoid the version 1.0