SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2010-1871

Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability

KEVHIGH 8.8EPSS 83.4%

Does this matter?

Known to be exploited in the wild (CISA KEV, CISA remediation deadline 10 June 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.

Description

JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.

CVSS 3.1
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
83.40% probability · 100th percentile
CISA KEV
Listed 10 December 2021 · due 10 June 2022
Weakness
CWE-917
Affected
redhat/jboss enterprise application platform · netapp/oncommand balance · netapp/oncommand insight · netapp/oncommand unified manager
Source
cve@mitre.org

CISA notes

Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2010-1871

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.