CVE-2017-12189: High severity redhat JBoss Enterprise Application Platform vulnerability
It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656.
Other sources
It was reported that the jbossas init script performed unsafe file handling, which could result in local privilege escalation.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12189?
CVE-2017-12189 is classified as a medium severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2017-12189?
To fix CVE-2017-12189, update Red Hat JBoss Enterprise Application Platform to the latest patched version.
What specifically does CVE-2017-12189 affect?
CVE-2017-12189 affects the jboss init script in Red Hat JBoss Enterprise Application Platform 7.0.7.GA and Red Hat Enterprise Linux 6.0 and 7.0.
What are the risks associated with CVE-2017-12189?
The risks associated with CVE-2017-12189 include unauthorized local privilege escalation that can lead to further exploitation.
Was CVE-2017-12189 an incomplete fix for a previous vulnerability?
Yes, CVE-2017-12189 is the result of an incomplete fix for CVE-2016-8656.