PT-2017-4235 · Red Hat · Red Hat Jboss Application Server+1

Joao F M Figueiredo · Published 2017-08-30 · Updated 2025-10-22 · CVE-2017-12149

Positive Technologies · (AI Summary)

CVSS v3.1

10

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Application Server versions as shipped with Red Hat Enterprise Application Platform 5.2

Description The issue is related to the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker, which does not restrict classes for which it performs deserialization. This allows an attacker to execute arbitrary code via crafted serialized data. The vulnerability is associated with the restoration of untrusted data in memory, potentially enabling a remote attacker to execute arbitrary code using specially formed serialized data.

Recommendations For Red Hat JBoss Application Server versions as shipped with Red Hat Enterprise Application Platform 5.2, consider disabling the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker as a temporary workaround until a patch is available. Restrict access to the HTTP Invoker to minimize the risk of exploitation. Avoid using crafted serialized data in the affected application server until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2023-00724

CVE-2017-12149

RHSA-2018:1607

Affected Products

Red Hat Jboss Enterprise Application Platform

Red Hat Jboss Application Server

References · 22

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jboss_vulnscan.rb · Exploit
• 🔥 https://github.com/joaomatosf/JavaDeserH2HC · Exploit
• 🔥 https://github.com/gottburgm/Exploits/tree/master/CVE-2017-12149 · Exploit
• 🔥 https://github.com/yunxu1/jboss-_CVE-2017-12149 · Exploit
• 🔥 https://github.com/sevck/CVE-2017-12149 · Exploit
• 🔥 https://github.com/1337g/CVE-2017-12149 · Exploit
• 🔥 https://github.com/jreppiks/CVE-2017-12149 · Exploit
• https://access.redhat.com/errata/RHSA-2018:1608 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1607 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12149 · Security Note
• https://bdu.fstec.ru/vul/2023-00724 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12149 · Vendor Advisory
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12149 · Note
• https://t.me/cvenotify/108862 · Telegram Post
• https://t.me/rnetsec/11097 · Telegram Post