https://bugzilla.redhat.com/show_bug.cgi?id=1291292
--- Doc Text *updated* by Jason Shepherd <jshepherd(a)redhat.com> ---
It was found that use of a JMS ObjectMessage does not safely handle user supplied data
when deserializing objects. A remote attacker could use this flaw to execute arbitrary
code with the permissions of the application using a JMS ObjectMessage.
--
You are receiving this mail because:
You are on the CC list for the bug.