CVE Catalog
CVE-2017-9363
CriticalSummary
Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.
Risk Assessment
Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise and data leakage.
Recommendation
It is recommended to upgrade the Soffid IAM console to version 1.7.5 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.