CVE-2016-1999

Critical

Published: 30/05/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The server in HP Release Control versions 9.13, 9.20, and 9.21 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system takeover and data leakage.

Recommendation

It is recommended to upgrade to the latest version of HP Release Control to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

The server in HP Release Control 9.13, 9.20, and 9.21 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.