Apache Flex BlazeDS unsafe deserialization

🗓️ 13 May 2022 01:02:10Reported by GitHub Advisory DatabaseType

Apache Flex BlazeDS unsafe deserialization in versions 4.7.2 and earlier. Allows remote code execution

Reporter	Title	Published	Views	Family All 26
0day.today	Cisco ISE 2.4.0 XSS / Remote Code Execution Exploit	6 Feb 201900:00	–	zdt
Information Security Automation	Vulnerability subscriptions in terms of business	26 Apr 201718:25	–	avleonov
Circl	CVE-2017-5641	6 Feb 201900:27	–	circl
CNVD	VMware vCenter Server BlazeDS Component Remote Code Execution Vulnerability	4 Apr 201700:00	–	cnvd
Check Point Advisories	Apache Flex AMF BlazeDS Java Object Deserialization Remote Code Execution (CVE-2017-5641)	17 Mar 201900:00	–	checkpoint_advisories
CVE	CVE-2017-5641	28 Dec 201715:00	–	cve
Cvelist	CVE-2017-5641	28 Dec 201715:00	–	cvelist
Hacker One	U.S. Dept Of Defense: [HTAF4-213] [Pre-submission] Unsafe AMF deserialization (CVE-2017-5641) in Apache Flex BlazeDS at the https://www.███████/daip/messagebroker/amf	4 Nov 201904:12	–	hackerone
Imperva Blog	Deserialization Attacks Surge Motivated by Illegal Crypto-mining	24 Jan 201817:45	–	impervablog
myhack58	Java AMF3 exposure remote code execution vulnerability-vulnerability warning-the black bar safety net	7 Apr 201700:00	–	myhack58

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-5641
issues	www.issues.apache.org/jira/browse/FLEX-35290
support	www.support.hpe.com/hpsc/doc/public/display
kb	www.kb.cert.org/vuls/id/307983
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-506/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-507/
mail-archives	www.mail-archives.apache.org/mod_mbox/flex-dev/201703.mbox/%[email protected]%3E
web	www.web.archive.org/web/20170920093830/http://www.securitytracker.com/id/1038273
web	www.web.archive.org/web/20210124021605/http://www.securityfocus.com/bid/97383
github	www.github.com/apache/flex-blazeds/commit/11b0aa132d9a43bf81fa12654ff227ff247b4627

06 Oct 2023 21:11Current

7.7High risk

Vulners AI Score7.7

CVSS 27.5

CVSS 3.19.8

EPSS0.48477