CVE-2016-6330

Published: Sep 27, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3737.

Affected (16)

Products: Redhat: Jboss Operations Network

Redhat

1 product

Jboss Operations Network

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Operations Network	Version 3.0.1
Redhat Jboss Operations Network	Version 3.0
Redhat Jboss Operations Network	Version 3.1.1
Redhat Jboss Operations Network	Version 3.1.2
Redhat Jboss Operations Network	Version 3.1.4
Redhat Jboss Operations Network	Version 3.1
Redhat Jboss Operations Network	Version 3.2.0
Redhat Jboss Operations Network	Version 3.2.1
Redhat Jboss Operations Network	Version 3.2.2
Redhat Jboss Operations Network	Version 3.2.3
Redhat Jboss Operations Network	Version 3.3.1
Redhat Jboss Operations Network	Version 3.3.2
Redhat Jboss Operations Network	Version 3.3.3
Redhat Jboss Operations Network	Version 3.3.4
Redhat Jboss Operations Network	Version 3.3.5
Redhat Jboss Operations Network	Version 3.3.6