← Database

CVE-2022-34268

CRITICAL CVSS: 9.8 Published: 2023-12-25 Modified: 2026-06-17

Description

An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host.

Affected Platforms

Rws Worldserver

Weakness Type

CWE-502, CWE-502

References