CVEvulnerability
CVE-2017-12189
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-282
Description
It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656.
Affected configurations
• redhat jboss enterprise application platform 7.0
• redhat enterprise linux 6.0
• redhat enterprise linux 7.0
Related
Weakness · CWE (1)
- CWE-282 Improper Ownership Management weakness
References
- http://www.securityfocus.com/bid/102407 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:0002 Patch, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:0003 Patch, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:0004 Patch, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:0005 Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12189 Issue Tracking, Third Party Advisory
- http://www.securityfocus.com/bid/102407 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:0002 Patch, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:0003 Patch, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:0004 Patch, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:0005 Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12189 Issue Tracking, Third Party Advisory