CVE-2017-7536
In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.48%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue().
- CVSS 3.1
- 7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.48% probability · 40th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-592, CWE-470
- Affected
- redhat/hibernate validator · redhat/satellite · redhat/satellite capsule · redhat/jboss enterprise application platform · redhat/virtualization · redhat/virtualization host
- Source
- secalert@redhat.com
References
- http://www.securityfocus.com/bid/101048Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039744Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:2808Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:2809Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:2810Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:2811Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3141Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3454Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3455Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3456Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3458Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:2740Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:2741Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:2742Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:2743Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:2927Vendor Advisory
- https://access.redhat.com/errata/RHSA-2018:3817Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1465573Issue Tracking, Vendor Advisory
- https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E
- http://www.securityfocus.com/bid/101048Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039744Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:2808Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:2809Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:2810Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:2811Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3141Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3454Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3455Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3456Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:3458Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.