CVE CVE-2016-5062 Mappings

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name
CVE-2016-5062 n/a uncategorized T1190 Exploit Public-Facing Application
CVE-2016-5062 n/a uncategorized T1059 Command and Scripting Interpreter