Java Deserialization Vulnerability Detected

The host runs a Java application that suffers from Java Deserialization vulnerability. The application accepts serialized objects, however it does not validate or check untrusted input before deserializing it.

An unauthenticated, remote attacker could exploit this vulnerability to execute arbitrary Java code on the system.

Customers are advised to contact the vendor to patch this vulnerability.

Please refer to this blog for more information about Java Deserialization vulnerabilities.