Red Hat Security Advisory

RHSA-2021:0105

Red Hat Process Automation Manager 7.9.1 security update

Released 2021-01-13 · Red Hat rating Important · View on Red Hat →

Fixed in

RHPAM 7.9.1

Fixes 1 record

TI-2020-16038 CVE-2020-26217 · GHSA-mw36-7c6c-q4q2

Remote Code Execution in XStream

CRITICAL 87

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.84968 Published 2020-11-16 Partial fix · 1.4.14, 1.4.14-java7 CWE-78