Lucene search

RedhatCVELIST:CVE-2017-2595

HistoryJul 27, 2018 - 3:00 p.m.

CVE-2017-2595

2018-07-2715:00:00

CWE-22

redhat

www.cve.org

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal.

CNA Affected

[
  {
    "product": "wildfly",
    "vendor": "[UNKNOWN]",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

rhn.redhat.com/errata/RHSA-2017-1409.html

rhn.redhat.com/errata/RHSA-2017-1551.html

www.securityfocus.com/bid/98967

www.securitytracker.com/id/1038757

access.redhat.com/errata/RHSA-2017:1410

access.redhat.com/errata/RHSA-2017:1411

access.redhat.com/errata/RHSA-2017:1412

access.redhat.com/errata/RHSA-2017:1548

access.redhat.com/errata/RHSA-2017:1549

access.redhat.com/errata/RHSA-2017:1550

access.redhat.com/errata/RHSA-2017:1552

access.redhat.com/errata/RHSA-2017:3454

access.redhat.com/errata/RHSA-2017:3455

access.redhat.com/errata/RHSA-2017:3456

access.redhat.com/errata/RHSA-2017:3458

bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2595

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

Related for CVELIST:CVE-2017-2595