CVE-2018-12533

Scores

EPSS

0.755medium75.5%
0%20%40%60%80%100%

Percentile: 75.5%

CVSS

9.8critical3.x
0246810

CVSS Score: 9.8/10

All CVSS Scores

CVSS 3.x
9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0
7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvdredhat

CWEs

CWE-917CWE-94

Related Vulnerabilities

Exploits

Recommendations

Source: nvd

Before applying this update, back up your existing Red Hat JBoss EnterpriseApplication Platform installation and deployed applications.
The JBoss server process must be restarted for the update to take effect.
For details on how to apply this update, refer to:https://access.redhat.com/articles/11258

URL: https://access.redhat.com/errata/RHSA-2018:2664

Source: nvd

Before applying this update, back up your existing Red Hat JBoss EnterpriseApplication Platform installation and deployed applications.
The JBoss server process must be restarted for the update to take effect.
For details on how to apply this update, refer to:https://access.redhat.com/articles/11258

URL: https://access.redhat.com/errata/RHSA-2018:2663

Vulnerable Software (3)

Type: Configuration

Product: richfaces

Operating System: rhel

Trait:
{  "fixed": "3.3.1-7.SP3_patch_02.ep5.el5"}

Source: redhat

Type: Configuration

Product: richfaces

Operating System: rhel

Trait:
{  "fixed": "3.3.1-4.SP3_patch_02.ep5.el6_10"}

Source: redhat

Type: Configuration

Vendor: *

Product: richfaces

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:redhat:richfaces:*:*:*:*:*:*:*:*",      "versionEndIncluding": "3.3.4",      "versionStartIncluding": "3.1.0",      "vulnerable": true    }  ...

Source: nvd

End of list