VULNERABILITY INTELLIGENCE

CVE-2017-12189

CVSS score7.8 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2018-01-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656.

Weakness classification

  • CWE-282: Improper Ownership Management

Primary references