High severity · published Jan 10, 2018
CVE-2017-12189
It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege…
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
6.0; 7.0 · source: NVD
JE
Jboss Enterprise Application Platform · Redhat
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-12189
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-12189
Third Party Advisory
http://www.securityfocus.com/bid/102407
Patch
https://access.redhat.com/errata/RHSA-2018:0002
Patch
https://access.redhat.com/errata/RHSA-2018:0003
Patch
https://access.redhat.com/errata/RHSA-2018:0004
Patch
https://access.redhat.com/errata/RHSA-2018:0005
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12189
More from Enterprise Linux
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2018-14667
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.0
CVE-2021-40438
mod_proxy SSRF