PT-2007-7278 · Red Hat · Jboss Seam

Publicado 2007-12-18 · Atualizado 2011-03-08 · CVE-2007-6433

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JBoss Seam versions prior to 2.0.0.CR3

Description The issue allows remote attackers to inject and execute arbitrary EJBQL commands. This is possible due to a flaw in the getRenderedEjbql method in the org.jboss.seam.framework.Query class. The order parameter is specifically vulnerable to this type of injection.

Recommendations For JBoss Seam versions prior to 2.0.0.CR3, update to version 2.0.0.CR3 or later to resolve the issue. As a temporary workaround, consider restricting access to the getRenderedEjbql method in the org.jboss.seam.framework.Query class to minimize the risk of exploitation. Avoid using the order parameter in affected queries until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-6433

RHSA-2008:0151

RHSA-2008:0158

RHSA-2008:0213

Produtos afetados

Jboss Seam

Referências · 10

• 🔥 http://jira.jboss.com/jira/browse/JBSEAM-2084 · Exploit
• http://redhat.com/support/errata/RHSA-2008-0151.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2008-0213.html · Aviso do Fabricante
• http://securityfocus.com/bid/26850 · Nota
• http://redhat.com/support/errata/RHSA-2008-0158.html · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=549490&group_id=22866 · Nota
• http://secunia.com/advisories/28077 · Aviso do Fabricante
• http://osvdb.org/42631 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6433 · Nota de Segurança
• http://vupen.com/english/advisories/2007/4215 · Nota