high7.6
CVE-2017-2617
hawtio before version 1.5.5 is vulnerable to remote code execution via file upload.
Impact
hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a crafted file which could be executed on a target machine where hawtio is deployed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hawt | Hawtio | before 1.5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96036
- https://access.redhat.com/errata/RHSA-2018:0319
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2617
- http://www.securityfocus.com/bid/96036
- https://access.redhat.com/errata/RHSA-2018:0319
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2617