CVE-2017-12149 — Red Hat JBoss Application Server Remote Code Execution Vulnerability

provenance: imported · CVE: CVE-2017-12149

CVE-2017-12149: Red Hat JBoss Application Server Remote Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Red Hat
Product	JBoss Application Server
Date added	2021-12-10
Due date	2022-06-10
Ransomware campaign use	Known

Description

The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-12149

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-12149
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog