Kenn White (@kennwhite): This will get very ugly: unpatched, full remote exec on Java-based web svcs that use a popular serialization library

Gary -