CVE-2017-8046

Related Files

Red Hat Security Advisory 2018-2405-01

Posted Aug 15, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2405-01 - Red Hat Fuse Integration Services provides a set of tools and containerized xPaaS images that enable development, deployment, and management of integration microservices within OpenShift. Security fix: undertow: Client can use bogus uri in Digest authentication spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code Issues addressed include bypass, deserialization, and file disclosure vulnerabilities.

tags | advisory, java, arbitrary, vulnerability

systems | linux, redhat

advisories | CVE-2017-12196, CVE-2017-8046, CVE-2018-1199, CVE-2018-1295, CVE-2018-9159

SHA-256 | 22636c0c9a281b66fbd3d47e07d655863a099b143f205af9a4652c4f6965646b

Download | Favorite | View

Spring Data REST PATCH Request Remote Code Execution

Posted Mar 15, 2018

Authored by Antonio Francesco Sardella

Spring Data REST versions prior to 2.6.9 (Ingalls SR9) and 3.0.1 (Kay SR1) suffer from a PATCH request remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2017-8046

SHA-256 | d1731be7e3c13eb181dffc18934b90d84ba2b0e795604b2cfbfe2829c85a1b0b

Download | Favorite | View