A vulnerability described as problematic has been identified in Apache Karaf up to 2.11.x. The affected element is an unknown function of the component Decanter log-socket Collector. Such manipulation leads to deserialization.
The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.