A vulnerability described as problematic has been identified in Apache Karaf up to 2.11.x. The affected element is an unknown function of the component Decanter log-socket Collector. Such manipulation leads to deserialization.

The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.