cnvd - cnvd-2015-01339

cnvd-2015-01339

Vulnerability from cnvd

Title: UberFire Framework存在多个漏洞

Description:

UberFire Framework是一套富客户端平台架构软件。该软件支持高可用性的部署。

UberFire Framework 0.3.x版本中存在任意代码执行和文件读取漏洞，该漏洞源于程序未能正确限制路径。远程攻击者可通过向FileUploadServlet上传特制的内容利用该漏洞执行任意代码或读取任意文件。

Severity: 中

Patch Name: UberFire Framework存在多个漏洞的补丁

Patch Description:

UberFire Framework是一套富客户端平台架构软件。该软件支持高可用性的部署。UberFire Framework 0.3.x版本中存在任意代码执行和文件读取漏洞，该漏洞源于程序未能正确限制路径。远程攻击者可通过向FileUploadServlet上传特制的内容利用该漏洞执行任意代码或读取任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://rhn.redhat.com/errata/RHSA-2015-0234.html

Reference: http://rhn.redhat.com/errata/RHSA-2015-0234.html https://github.com/uberfire/uberfire/commit/21ec50eb15

Impacted products

Name
['Red Hat jboss uberfire 0.3.0', 'Red Hat jboss uberfire 0.3.1', 'Red Hat jboss uberfire 0.3.2', 'Red Hat jboss uberfire 0.3.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2014-8114"
    }
  },
  "description": "UberFire Framework\u662f\u4e00\u5957\u5bcc\u5ba2\u6237\u7aef\u5e73\u53f0\u67b6\u6784\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u652f\u6301\u9ad8\u53ef\u7528\u6027\u7684\u90e8\u7f72\u3002\r\n\r\nUberFire Framework 0.3.x\u7248\u672c\u4e2d\u5b58\u5728\u4efb\u610f\u4ee3\u7801\u6267\u884c\u548c\u6587\u4ef6\u8bfb\u53d6\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u9650\u5236\u8def\u5f84\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411FileUploadServlet\u4e0a\u4f20\u7279\u5236\u7684\u5185\u5bb9\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u8bfb\u53d6\u4efb\u610f\u6587\u4ef6\u3002",
  "discovererName": "unknown",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://rhn.redhat.com/errata/RHSA-2015-0234.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-01339",
  "openTime": "2015-02-28",
  "patchDescription": "UberFire Framework\u662f\u4e00\u5957\u5bcc\u5ba2\u6237\u7aef\u5e73\u53f0\u67b6\u6784\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u652f\u6301\u9ad8\u53ef\u7528\u6027\u7684\u90e8\u7f72\u3002UberFire Framework 0.3.x\u7248\u672c\u4e2d\u5b58\u5728\u4efb\u610f\u4ee3\u7801\u6267\u884c\u548c\u6587\u4ef6\u8bfb\u53d6\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u9650\u5236\u8def\u5f84\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411FileUploadServlet\u4e0a\u4f20\u7279\u5236\u7684\u5185\u5bb9\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u8bfb\u53d6\u4efb\u610f\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "UberFire Framework\u5b58\u5728\u591a\u4e2a\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Red Hat jboss uberfire 0.3.0",
      "Red Hat jboss uberfire 0.3.1",
      "Red Hat jboss uberfire 0.3.2",
      "Red Hat jboss uberfire 0.3.3"
    ]
  },
  "referenceLink": "http://rhn.redhat.com/errata/RHSA-2015-0234.html \r\nhttps://github.com/uberfire/uberfire/commit/21ec50eb15",
  "serverity": "\u4e2d",
  "submitTime": "2015-02-27",
  "title": "UberFire Framework\u5b58\u5728\u591a\u4e2a\u6f0f\u6d1e"
}

CVE-2014-8114 (GCVE-0-2014-8114)

Vulnerability from cvelistv5

Published

2015-02-20 16:00

Modified

2024-08-06 13:10

Severity ?

CWE

Summary

The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involving FileDownloadServlet.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-0234.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0235.html	vendor-advisory, x_refsource_REDHAT
	https://github.com/uberfire/uberfire/commit/21ec50eb15	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/88199	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:50.634Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:0234",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0234.html"
          },
          {
            "name": "RHSA-2015:0235",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0235.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/uberfire/uberfire/commit/21ec50eb15"
          },
          {
            "name": "88199",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/88199"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involving FileDownloadServlet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-12T18:06:03",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2015:0234",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0234.html"
        },
        {
          "name": "RHSA-2015:0235",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0235.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/uberfire/uberfire/commit/21ec50eb15"
        },
        {
          "name": "88199",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/88199"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8114",
    "datePublished": "2015-02-20T16:00:00",
    "dateReserved": "2014-10-10T00:00:00",
    "dateUpdated": "2024-08-06T13:10:50.634Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted