CVE-2017-2617 hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a crafted file which could be executed on a target machine where....
HighCVSS 7.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a crafted file which could be executed on a target machine where hawtio is deployed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hawtio | < 1.5.5 | 1.5.5 |
| [UNKNOWN] hawtio | = hawtio 1.5.5 | No fix listed |
References
- 96036 third-party-advisory vdb-entry
- RHSA-2018:0319 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory