PT-2017-17795 · Rhmap · Millicore

Published 2017-09-28 · Updated 2019-10-03 · CVE-2017-7552

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions millicore versions prior to 3.19.0 millicore versions 4.x prior to 4.5.0

Description A flaw in the file editor allows files to be executed as well as created, potentially compromising other users' or teams' projects stored in the source control management of the RHMAP Core installation.

Recommendations For versions prior to 3.19.0, update to version 3.19.0 or later. For versions 4.x prior to 4.5.0, update to version 4.5.0 or later.

Fix

Related Identifiers

CVE-2017-7552

RHSA-2017:2674

Affected Products

Millicore

References · 5

• https://access.redhat.com/errata/RHSA-2017:2675 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7552 · Security Note
• https://access.redhat.com/errata/RHSA-2017:2674 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7552 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1477797 · Note