CVE-2016-1986

Critical

Published: 12/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HP Continuous Delivery Automation (CDA) version 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Risk Assessment

An attacker can exploit this vulnerability to execute remote code, potentially leading to system compromise and data leakage.

Recommendation

It is recommended to upgrade to the latest version of HP CDA and monitor systems for unauthorized activities.

Original NVD description (English source)

HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.