CVE-2017-12149: Red Hat JBoss Application Server Remote Code Execution Vulnerability
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.
Other sources
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12149?
The severity of CVE-2017-12149 is considered critical due to its potential for remote code execution.
How do I fix CVE-2017-12149?
To fix CVE-2017-12149, you should update to a patched version of Red Hat JBoss Enterprise Application Platform beyond 5.2.2.
What versions are affected by CVE-2017-12149?
CVE-2017-12149 affects Red Hat JBoss Enterprise Application Platform versions 5.0.0 through 5.2.2.
Can CVE-2017-12149 be exploited remotely?
Yes, CVE-2017-12149 can be exploited remotely by sending crafted serialized data to the affected application.
What type of vulnerability is CVE-2017-12149?
CVE-2017-12149 is a deserialization vulnerability that can lead to the execution of arbitrary code.