NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#parasoft

0 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedcommand-execution2 continuous-testing2 deserialization1 jsp1 tomcat1

2 stories, newest first · one card per story

Exploit-DB10d ago

Exploit-DB lists JSP command execution in Parasoft CTP 10.7.5

The remote entry covers Parasoft Continuous Testing Platform 10.7.5 and states no patch or attack status.

parasoft command-execution

1

Full Disclosure10d agohigh

Parasoft CTP 10.7.5-SNAPSHOT anonymous deserialization leads to command execution

Researchers say an anonymous database-restore deserialization in the em web app can run commands as uid=1000.

2 sources parasoft deserialization

1