CVE-2017-1000486

Primefaces 5.x uses weak encryption that allows attackers to bypass security controls and execute arbitrary code on the server. This is a critical vulnerability because it gives complete control of the application to an attacker.

Primefaces 5.x implements inadequate encryption (CWE-326) for sensitive data protection, enabling attackers to decrypt or manipulate encrypted values without authentication. This weak cryptographic implementation can be exploited to achieve remote code execution, resulting in complete system compromise.