9.8Crítica
KEV
Usada en ransomware
CVE-2017-12149Red Hat JBoss Application Server Remote Code Execution Vulnerability
Explotación conocida — Red Hat JBoss Application Server Remote Code Execution Vulnerability
CISA confirmó el 10.12.2021 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 10.06.2022.
Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2017-12149
Descripción
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.
Debilidad (CWE):
CWE-502
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| redhat | jboss enterprise application platform | 5.0.0 | |
| Red Hat, Inc. | jbossas | — |
Referencias y parches
- https://bugzilla.redhat.com/show_bug.cgi?id=1486220 Issue Tracking
- RHSA-2018:1608 vendor-advisoryThird Party Advisory
- https://github.com/gottburgm/Exploits/tree/master/CVE-2017-12149 Third Party Advisory
- 100591 vdb-entryThird Party AdvisoryVDB Entry
- RHSA-2018:1607 vendor-advisoryThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12149 US Government Resource
Coincidencias CPE (NVD) (9)
cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1:*:*:*:*:*:*:*cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1:*:*:*:*:*:*:*cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2:*:*:*:*:*:*:*cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.1:*:*:*:*:*:*:*cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.2:*:*:*:*:*:*:*