Erik Bosman
If you run Code42 CrashPlan, you'll want to verify whether your firewall filters unused TCP ports https://blog.radicallyopensecurity.com/CVE-2017-9830.html … #deserialize #RCE
Jun 27, 2017 at 5:44pmWeb
Show threadErik BosmanJun 27, 2017
Basically: get the server to instantiate an object of arbitrary class, pick an RMI object, exploit the resulting RMI server with #ysoserial.