critical9.8Known exploited
CVE-2018-14667
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-09-28. Federal due date: 2023-10-19.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Impact
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Richfaces | from 3.1.0 through 3.3.4 |
| Redhat | Enterprise Linux | Versions 5.0, 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html
- http://seclists.org/fulldisclosure/2020/Mar/21
- http://www.securitytracker.com/id/1042037
- https://access.redhat.com/errata/RHSA-2018:3517
- https://access.redhat.com/errata/RHSA-2018:3518
- https://access.redhat.com/errata/RHSA-2018:3519
- https://access.redhat.com/errata/RHSA-2018:3581
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667
- http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html
- http://seclists.org/fulldisclosure/2020/Mar/21
- http://www.securitytracker.com/id/1042037
- https://access.redhat.com/errata/RHSA-2018:3517
- https://access.redhat.com/errata/RHSA-2018:3518
- https://access.redhat.com/errata/RHSA-2018:3519
- https://access.redhat.com/errata/RHSA-2018:3581
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14667