Hackers actively exploiting JBoss vulnerability to compromise servers, researchers say

Attackers are actively exploiting a known vulnerability to compromise JBoss Java EE application servers that expose the HTTP Invoker service to the Internet in an insecure manner.