Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:OPENMRS-INSECURE-DESERIAL |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
OpenMRS webservices.rest Insecure Object Deserialization |
Release Date |
2019/06/09 |
Update Number |
3179 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: OpenMRS webservices.rest Insecure Object Deserialization
This signature detects attempts to exploit a known vulnerability against OpenMRS. A successful attack can lead to arbitrary code execution.
Extended Description
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.
Affected Products
- Openmrs openmrs 2.0
- Openmrs openmrs 2.1
- Openmrs openmrs 2.10
- Openmrs openmrs 2.2
- Openmrs openmrs 2.3
- Openmrs openmrs 2.3.1
- Openmrs openmrs 2.4
- Openmrs openmrs 2.5
- Openmrs openmrs 2.6.0
- Openmrs openmrs 2.6.1
- Openmrs openmrs 2.7.0
- Openmrs openmrs 2.8.0
- Openmrs openmrs 2.8.1
- Openmrs openmrs 2.9.0
References
- CVE: CVE-2018-19276