Linux Distros Unpatched Vulnerability : CVE-2017-5661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. T...

RHEL 6 : fop (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - fop: XML external entity processing vulnerability CVE-2017-5661 Note that Nessus has not tested for this issue but...

RHEL 7 : fop (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - fop: XML external entity processing vulnerability CVE-2017-5661 Note that Nessus has not tested for this issue but...

Security Bulletin: Vulnerability found in fop-1.1.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-5661)

Summary Vulnerability have been identified in fop-1.1.jar which is shipped with IBM® Intelligent Operations Center. Information about this vulnerability affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2017-5661...

net.sf.barcode4j:barcode4j-fop-ext (2.0), net.sf.barcode4j:barcode4j-fop-ext-complete (2.0) potentially affected by CVE-2017-5661 via org.apache.xmlgraphics:fop (0.93)

org.apache.xmlgraphics:fop MAVEN version 0.93 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.xmlgraphics:fop and may be impacted: - net.sf.barcode4j:barcode4j-fop-ext 2.0 - net.sf.barcode4j:barcode4j-fop-ext-complete 2.0 Source cves:...

ca.ace-design-lab:island-arena (3.0), ca.ace-design-lab:island-engine (3.0) +105 more potentially affected by CVE-2017-5661 via org.apache.xmlgraphics:fop (0.94)

org.apache.xmlgraphics:fop MAVEN version 0.94 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.xmlgraphics:fop and may be impacted: - ca.ace-design-lab:island-arena 3.0 - ca.ace-design-lab:island-engine 3.0 - ca.ace-design-lab:island-runner 3...

com.davegurnell:anchorman-core_2.11 (>=0.4.0, <=0.5.0), com.davegurnell:anchorman-core_2.12 (>=0.4.0, <=0.7.0) +81 more potentially affected by CVE-2017-5661 via org.apache.xmlgraphics:fop (>=2.0, <=2.1)

org.apache.xmlgraphics:fop MAVEN version =2.0, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =1.0.5, =1.0.2, =1.0.5, =4.2.3, =5.3.0 and more Source cves: CVE-2017-5661 Source advisory: GHSA-5HG8-R9VQ-GJQP...

com.adobe.aem:aem-sdk-api (2020.6.3800.20200626t210738z-200604), com.agilejava.docbkx:docbkx-fop-support (>=2.0.12, <=2.0.14) +55 more potentially affected by CVE-2017-5661 via org.apache.xmlgraphics:fop (1.0)

org.apache.xmlgraphics:fop MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.xmlgraphics:fop and may be impacted: - com.adobe.aem:aem-sdk-api 2020.6.3800.20200626t210738z-200604 - com.agilejava.docbkx:docbkx-fop-support...

com.day.cq:cq-rewriter (5.1.4) potentially affected by CVE-2017-5661 via org.apache.xmlgraphics:fop (0.95beta-1)

org.apache.xmlgraphics:fop MAVEN version 0.95beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.xmlgraphics:fop and may be impacted: - com.day.cq:cq-rewriter 5.1.4 Source cves: CVE-2017-5661 Source advisory: OSV:GHSA-5HG8-R9VQ-GJQP...

com.agilejava.docbkx:docbkx-fop-support (>=2.0.9, <=2.0.11), com.agilejava.docbkx:docbkx-maven-plugin (>=2.0.9, <=2.0.11) +39 more potentially affected by CVE-2017-5661 via org.apache.xmlgraphics:fop (0.95)

org.apache.xmlgraphics:fop MAVEN version 0.95 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.xmlgraphics:fop and may be impacted: - com.agilejava.docbkx:docbkx-fop-support =2.0.9, =2.0.9, =5.3.0, =1.8.1-interpolation-hotfix-rc4, =1.5.0.1,...

openSUSE 15 Security Update : php7 (openSUSE-SU-2021:1130-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1130-1 advisory. - Tenable.sc leverages third-party software to help provide underlying functionality. Multiple third-party components were found to contain...

openSUSE 15 Security Update : php7 (openSUSE-SU-2021:2575-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2575-1 advisory. - Tenable.sc leverages third-party software to help provide underlying functionality. Multiple third-party components were found to contain...

Security Bulletin: Security vulnerability in Apache FOP affects IBM® Rational® Quality Manager

Summary Security Vulnerability in Apache FOP shipped with IBM Rational Quality Manager was disclosed. IBM Rational Quality Manager has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2017-5661 DESCRIPTION: Apache FOP could allow a remote authenticated attacker to obtain sensitive...

[SECURITY] [DSA 3864-1] fop security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3864-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 27, 2017 https://www.debian.org/security/faq -...

[ASA-201705-19] fop: xml external entity injection

Arch Linux Security Advisory ASA-201705-19 ========================================== Severity: Medium Date : 2017-05-21 CVE-ID : CVE-2017-5661 Package : fop Type : xml external entity injection Remote : Yes Link : https://security.archlinux.org/AVG-254 Summary ======= The package fop before...

[SECURITY] [DLA 927-1] fop security update

Package : fop Version : 1:1.0.dfsg2-6+deb7u1 CVE ID : CVE-2017-5661 Debian Bug : 860567 In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the use...

CVE-2017-5661

In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full...

Apache XML Graphics FOP 2.1 Information Disclosure Vulnerability

Exploit for multiple platform in category remote exploits CVE-2017-5661: Apache XML Graphics FOP information disclosure vulnerability Severity: Medium Vendor: The Apache Software Foundation Versions Affected: FOP 1.0 - 2.1 Description: Files lying on the filesystem of the server which uses batik...

CVE-2017-5661

In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full...

CVE-2017-5661

In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full...