CVE-2017-2617

    Dashboard / Vulnerabilities / CVE-2017-2617

    CVE-2017-2617

    Published: 22 May 2018Last Modified: 8 Jul 2026

    Summary:

    Details: hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a crafted file which could be executed on a target machine where hawtio is deployed.

    References: http://www.securityfocus.com/bid/96036, https://access.redhat.com/errata/RHSA-2018:0319, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2617

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -b933b370f4c78a5657b538c1da0609305ecd9b52

    Affected versions

    hawtio-1.5.X
    hawtio-1.5.4
    hawtio-1.5.3
    hawtio-1.5.0
    hawtio-1.5.2
    hawtio-1.5.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2017-2617 | CVE-DB