Java Deserialization Remote Code Execution ob BOXI3.1SP7

[Former Member]

I have this requirement to disable the Java Deserialization Remote code execution on one of our Tomcat Web App servers.

Can you please guide me how to execute/disable this on the Tomcat Web App server and then have to test Business objects Webi reports etc to make sure if this has any impact.

Thanks,

Shravan

[Former Member]

Hi Shravan,

As per the error message I guess its a security vulnerability in tomcat  Remote Code Execution CVE-2013-4444 is a bug in tomcat.

To fix this vulnerability you need to upgrade your minor version of tomcat to tomcat 7.0.40.

You could also refer to tomcat link below.

https://tomcat.apache.org.security-7.html

Thanks