Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-37578— Remote code execution via RMI

EPSS 1.58% · P82
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-37578

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Remote code execution via RMI
Source: NVD (National Vulnerability Database)
Vulnerability Description
Apache jUDDI uses several classes related to Java's Remote Method Invocation (RMI) which (as an extension to UDDI) provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicious serialized object to the above RMI entries. The objects get deserialized without any check on the incoming data. In the worst case, it may let the attacker run arbitrary code remotely. For both jUDDI web service applications and jUDDI clients, the usage of RMI is disabled by default. Since this is an optional feature and an extension to the UDDI protocol, the likelihood of impact is low. Starting with 3.3.10, all RMI related code was removed.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
可信数据的反序列化
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apache jUDDI 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache jUDDI是一个服务于WebServices 的UDDI的java实现开源包。 Apache jUDDI 3.3.10之前的版本存在代码问题漏洞。该漏洞源于Apache jUDDI使用了几个与Java的远程方法调用(RMI)相关的类，RMI(作为UDDI的扩展)提供了访问UDDI服务的替代传输。RMI使用默认的Java序列化机制在RMI调用中传递参数。远程攻击者可利用该漏洞向上述RMI条目发送恶意的序列化对象，对象在不检查传入数据的情况下被反序列化。在最坏的情况下，它可能让攻击者远程运行任意
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
Apache Software FoundationApache jUDDI unspecified ~ 3.3.10 -

II. Public POCs for CVE-2021-37578

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-37578

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: Apache jUDDI
Same vendor: Apache Software Foundation
Same weakness: CWE-502

V. Comments for CVE-2021-37578

No comments yet

Leave a comment