Multiple Apache Products CVE-2017-15708 Remote Code Execution Vulnerability
BID:102154
Info
Multiple Apache Products CVE-2017-15708 Remote Code Execution Vulnerability
| Bugtraq ID: | 102154 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-15708 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 11 2017 12:00AM |
| Updated: | Dec 19 2017 10:01PM |
| Credit: | jianan.huang |
| Vulnerable: |
Apache Synapse 3.0 Apache Synapse 2.1 Apache Synapse 2.0 Apache Synapse 1.2 Apache Synapse 1.1.1 Apache Synapse 1.0 Apache commons-collections 3.2.1 Apache commons-collections 3.2 Apache commons-collections 3.1 Apache commons-collections 3.0 Apache commons-collections 2.1 Apache commons-collections 2.0 Apache commons-collections 1.2 Apache commons-collections 1.1 Apache commons-collections 1.0 |
| Not Vulnerable: |
Apache Synapse 3.0.1 Apache commons-collections 3.2.2 |
Discussion
Multiple Apache Products CVE-2017-15708 Remote Code Execution Vulnerability
Multiple Apache products are prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition.
The following products are affected:
Apache Commons Collections 3.2.1 and prior
Apache Synapse 3.0.0 and prior
Multiple Apache products are prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition.
The following products are affected:
Apache Commons Collections 3.2.1 and prior
Apache Synapse 3.0.0 and prior
Exploit / POC
Multiple Apache Products CVE-2017-15708 Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple Apache Products CVE-2017-15708 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.