HTTP: JBoss Seam Parameterized Expression Language Expressions Remote Code Execution
This signature detects attempts to exploit a known vulnerability against JBoss Seam. A successful exploit can lead to remote code execution.
Extended Description
JBoss Seam is prone to a remote code-execution vulnerability because it fails to properly validate certain Expression Language (EL) expressions. Attackers can exploit this issue to execute arbitrary code within the context of the affected application.
Affected Products
Jboss_group jboss_seam
Short Name
HTTP:MISC:JBOSS-SEAM-EL-RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2010-1871 Code Execution Expression Expressions JBoss Language Parameterized Remote Seam bid:41994
Release Date
06/09/2015
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown
Vendors
Red_hat
Jboss_group
CVSS Score
6.8