Lucene search

CVE-2017-15288

🗓️ 15 Nov 2017 16:00:00Reported by mitreType

The Scala compilation daemon allows local users to gain privileges by writing to arbitrary class files due to weak permissions on private files

Reporter	Title	Published	Views	Family All 14
OSV	High severity vulnerability that affects org.scala-lang:scala-compiler	19 Oct 201816:51	–	osv
OSV	CVE-2017-15288	15 Nov 201716:29	–	osv
0day.today	Scala 2.x Privilege Escalation Vulnerability	15 Nov 201700:00	–	zdt
RedhatCVE	CVE-2017-15288	23 Nov 201715:19	–	redhatcve
Tenable Nessus	GLSA-201812-08 : Scala: Privilege escalation	17 Dec 201800:00	–	nessus
Veracode	Arbitrary Code Execution	15 Nov 201707:13	–	veracode
Gentoo Linux	Scala: Privilege escalation	15 Dec 201800:00	–	gentoo
NVD	CVE-2017-15288	15 Nov 201716:29	–	nvd
Debian CVE	CVE-2017-15288	15 Nov 201716:29	–	debiancve
CVE	CVE-2017-15288	15 Nov 201716:29	–	cve

Source	Link
lists	www.lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
lists	www.lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
security	www.security.gentoo.org/glsa/201812-08
lists	www.lists.apache.org/thread.html/r18a05115cfa078c0f4e5c1ea2e8d64804f63e0095aa2174a3afecc0f%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r3f10022ec972c8df29a950d1a591c16562eeddd9194d3010e46b9b76%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r33665e9213cc6df1e48c3d99d1b0c7a3203e9bd0ef4fc4ba838bcb04%40%3Cjira.kafka.apache.org%3E
scala-lang	www.scala-lang.org/news/security-update-nov17.html
lists	www.lists.apache.org/thread.html/rf57e4d7211b30e51803911304f3b7b54393f7a4bd60bb0784c31eec1%40%3Cjira.kafka.apache.org%3E
github	www.github.com/scala/scala/pull/6128
lists	www.lists.apache.org/thread.html/r32e0b1d5ff43ac3ed4b179a4e663022d1c5ccac77884a99ea149e633%40%3Ccommits.druid.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Nov 2017 16:00Current

7.6High risk

Vulners AI Score7.6

EPSS0.0004