Attacker Value
High
CVE-2017-12149
CVE-2017-12149
(Last updated July 25, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Metasploit Module
Description
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.
Add Assessment
2
Technical Analysis
jboss is widely used in enterprise, and we sometimes found it internet exposed.
there are ready to use exploit and scanner ( https://github.com/joaomatosf/jexboss ) that let an attacker to blindly abuse this.
(un)fortunately, jboss by default runs as limited user, therefore LPE is needed to get root.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
9.8 Critical
Impact Score:
5.9
Exploitability Score:
3.9
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Vendors
- redhat
Products
- jboss enterprise application platform -,
- jboss enterprise application platform 5.0.0,
- jboss enterprise application platform 5.0.1,
- jboss enterprise application platform 5.1.0,
- jboss enterprise application platform 5.1.1,
- jboss enterprise application platform 5.1.2,
- jboss enterprise application platform 5.2.0,
- jboss enterprise application platform 5.2.1,
- jboss enterprise application platform 5.2.2
Metasploit Modules
Exploited in the Wild
References
