JBoss RichFaces Deserialization Vulnerability

A vulnerability has been identified in JBoss, which can be exploited by remote user to execute arbitrary code on the target system.  A remote user can send specially crafted data to trigger a flaw in the way RichFaces ResourceBuilderImpl handles deserialization and potentially execute arbitrary code on the target system. The code will run with the privileges of the target service.