Veille CVE
CVE-2018-14667
9.8 Critique Exploitée activementCatalogue CISA KEV — Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
Ajoutée le 28/09/2023 · Échéance de correction (agences US) : 19/10/2023
Action requise : Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.0 | 9.8 Critique | secalert@redhat.com | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 7.5 Élevée | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Faiblesses (CWE)
Références
- http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html Third Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2020/Mar/21 Mailing ListThird Party Advisory
- http://www.securitytracker.com/id/1042037 Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:3517 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:3518 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:3519 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:3581 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667 Issue TrackingVendor Advisory
- http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html Third Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2020/Mar/21 Mailing ListThird Party Advisory
- http://www.securitytracker.com/id/1042037 Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:3517 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:3518 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:3519 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:3581 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667 Issue TrackingVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14667 US Government Resource