Java deserialization vulnerability in QRadar RemoteJavaScript Servlet

Posted by Securify B.V. via Fulldisclosure on Oct 16

————————————————————————
Java deserialization vulnerability in QRadar RemoteJavaScript Servlet
————————————————————————
Abstract
————————————————————————
A Java deserialization vulnerability exists in the QRadar
RemoteJavaScript Servlet. An authenticated user can call one of the
vulnerable methods and…