PT-2018-3343 · Apache · Apache Netbeans

Moritz Bechler · Published 2018-12-30 · Updated 2023-05-23 · CVE-2018-17191

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apache NetBeans versions 9.0

Description: The issue is related to the Proxy Auto-Configuration (PAC) file in the Apache NetBeans development environment, which fails to neutralize script code in attributes on a web page. This can allow a remote attacker to execute arbitrary code. The vulnerability is exploited through the nashorn script engine, which leaks privileged objects that can be used to circumvent execution limits. Alternatively, using a different script engine can also lead to remote code execution, as no execution limits are in place.

Recommendations: For Apache NetBeans version 9.0, consider disabling the nashorn script engine or restricting its use to minimize the risk of exploitation until a patch is available. Additionally, avoid using the Proxy Auto-Configuration (PAC) interpretation feature in the NetBeans environment until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-83

Related Identifiers

BDU:2020-00132

CVE-2018-17191

Affected Products

Apache Netbeans

References · 13

• https://osv.dev/vulnerability/CVE-2018-17191 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-17191 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-17191 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-17191 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-17191 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17191 · Security Note
• https://bdu.fstec.ru/vul/2020-00132 · Security Note
• https://ubuntu.com/security/CVE-2018-17191 · Vendor Advisory
• https://lists.apache.org/thread.html/d1c37966a316a326ab4ff4d4bc056322e8adcbe984e8145c0ecda7fa@%3Cdev.netbeans.apache.org%3E · Note
• http://securityfocus.com/bid/106352 · Note
• https://lists.apache.org/thread.html/d1c37966a316a326ab4ff4d4bc056322e8adcbe984e8145c0ecda7fa%40%3Cdev.netbeans.apache.org%3E · Note
• https://securityfocus.com/bid/106352/info · Note
• https://openwall.com/lists/oss-security/2018/12/30/1 · Note