The remote Redhat Enterprise Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2015:2536 advisory.

    Red Hat JBoss Enterprise Application Platform 6 is a platform for Java     applications based on JBoss Application Server 7.

    It was found that the Apache commons-collections library permitted code     execution when deserializing objects involving a specially constructed     chain of classes. A remote attacker could use this flaw to execute     arbitrary code with the permissions of the application using the     commons-collections library. (CVE-2015-7501)

    Further information about this security flaw may be found at:
    https://access.redhat.com/solutions/2045023

    All users of Red Hat JBoss Enterprise Application Platform 6.3 on Red Hat     Enterprise Linux 6 are advised to upgrade to these updated packages.
    The JBoss server process must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 / 7 : Red Hat JBoss Enterprise Application Platform 6.3 (RHSA-2015:2536)

critical Nessus Plugin ID 87191

Version 2.22