Vulnerability-Lookup

CNVD-2018-17760

Vulnerability from cnvd - Published: 2018-09-06

Title

Red Hat WildFly IIOP OpenJDK子系统未授权操作漏洞

Description

Red Hat Wildfly（前称JBoss Application Server）是美国红帽（Red Hat）公司的一款基于JavaEE的开源应用服务器。IIOP OpenJDK subsystem是其中的一个基于Java的子系统。 Red Hat WildFly 14.0.0之前版本中的IIOP OpenJDK子系统存在安全漏洞，该漏洞源于在请求进行SSL传输时，程序未能执行相应的配置。攻击者可利用该漏洞造成客户端创建明文连接。

Severity

中

Patch Name

Red Hat WildFly IIOP OpenJDK子系统未授权操作漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页： http://wildfly.org/

Reference

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627

Impacted products

Name
Red Hat Wildfly <14.0.0

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-14627",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14627"
    }
  },
  "description": "Red Hat Wildfly\uff08\u524d\u79f0JBoss Application Server\uff09\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u57fa\u4e8eJavaEE\u7684\u5f00\u6e90\u5e94\u7528\u670d\u52a1\u5668\u3002IIOP OpenJDK subsystem\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u57fa\u4e8eJava\u7684\u5b50\u7cfb\u7edf\u3002\r\n\r\nRed Hat WildFly 14.0.0\u4e4b\u524d\u7248\u672c\u4e2d\u7684IIOP OpenJDK\u5b50\u7cfb\u7edf\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5728\u8bf7\u6c42\u8fdb\u884cSSL\u4f20\u8f93\u65f6\uff0c\u7a0b\u5e8f\u672a\u80fd\u6267\u884c\u76f8\u5e94\u7684\u914d\u7f6e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u5ba2\u6237\u7aef\u521b\u5efa\u660e\u6587\u8fde\u63a5\u3002",
  "discovererName": "Sam Fowler",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttp://wildfly.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-17760",
  "openTime": "2018-09-06",
  "patchDescription": "Red Hat Wildfly\uff08\u524d\u79f0JBoss Application Server\uff09\u662f\u7f8e\u56fd\u7ea2\u5e3d\uff08Red Hat\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u57fa\u4e8eJavaEE\u7684\u5f00\u6e90\u5e94\u7528\u670d\u52a1\u5668\u3002IIOP OpenJDK subsystem\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u57fa\u4e8eJava\u7684\u5b50\u7cfb\u7edf\u3002\r\n\r\nRed Hat WildFly 14.0.0\u4e4b\u524d\u7248\u672c\u4e2d\u7684IIOP OpenJDK\u5b50\u7cfb\u7edf\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5728\u8bf7\u6c42\u8fdb\u884cSSL\u4f20\u8f93\u65f6\uff0c\u7a0b\u5e8f\u672a\u80fd\u6267\u884c\u76f8\u5e94\u7684\u914d\u7f6e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u5ba2\u6237\u7aef\u521b\u5efa\u660e\u6587\u8fde\u63a5\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Red Hat WildFly IIOP OpenJDK\u5b50\u7cfb\u7edf\u672a\u6388\u6743\u64cd\u4f5c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Red Hat Wildfly \u003c14.0.0"
  },
  "referenceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627",
  "serverity": "\u4e2d",
  "submitTime": "2018-09-06",
  "title": "Red Hat WildFly IIOP OpenJDK\u5b50\u7cfb\u7edf\u672a\u6388\u6743\u64cd\u4f5c\u6f0f\u6d1e"
}

CVE-2018-14627 (GCVE-0-2018-14627)

Vulnerability from cvelistv5 – Published: 2018-09-04 12:00 – Updated: 2024-08-05 09:29

Summary

The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <transport-config confidentiality="required" trust-in-target="supported"/>

Severity

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-319

Assigner

redhat redhat root

References

7 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:3528	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3527	vendor-advisoryx_refsource_REDHAT
https://issues.jboss.org/browse/WFLY-9107	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-2018122…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:3595	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:3529	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
[UNKNOWN]	JBoss/WildFly	Affected: 14.0.0

Date Public

2017-07-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:51.696Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627"
          },
          {
            "name": "RHSA-2018:3528",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3528"
          },
          {
            "name": "RHSA-2018:3527",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3527"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.jboss.org/browse/WFLY-9107"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20181221-0002/"
          },
          {
            "name": "RHSA-2018:3595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3595"
          },
          {
            "name": "RHSA-2018:3529",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3529"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "JBoss/WildFly",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "14.0.0"
            }
          ]
        }
      ],
      "datePublic": "2017-07-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: \u003ctransport-config confidentiality=\"required\" trust-in-target=\"supported\"/\u003e"
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-319",
              "description": "CWE-319",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-22T10:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627"
        },
        {
          "name": "RHSA-2018:3528",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3528"
        },
        {
          "name": "RHSA-2018:3527",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3527"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.jboss.org/browse/WFLY-9107"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20181221-0002/"
        },
        {
          "name": "RHSA-2018:3595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3595"
        },
        {
          "name": "RHSA-2018:3529",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3529"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2018-14627",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "JBoss/WildFly",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "14.0.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "[UNKNOWN]"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: \u003ctransport-config confidentiality=\"required\" trust-in-target=\"supported\"/\u003e"
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-319"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627"
            },
            {
              "name": "RHSA-2018:3528",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3528"
            },
            {
              "name": "RHSA-2018:3527",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3527"
            },
            {
              "name": "https://issues.jboss.org/browse/WFLY-9107",
              "refsource": "CONFIRM",
              "url": "https://issues.jboss.org/browse/WFLY-9107"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20181221-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20181221-0002/"
            },
            {
              "name": "RHSA-2018:3595",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3595"
            },
            {
              "name": "RHSA-2018:3529",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:3529"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-14627",
    "datePublished": "2018-09-04T12:00:00.000Z",
    "dateReserved": "2018-07-27T00:00:00.000Z",
    "dateUpdated": "2024-08-05T09:29:51.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.