CVE-2017-12189

2018-01-1019:00:00

CWE-282

redhat

www.cve.org

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%

JSON

It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656.

CNA Affected

[
  {
    "product": "Red Hat JBoss Enterprise Application Platform",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.7.GA"
      }
    ]
  }
]