SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Web Server/CGI)  >   Red Hat JBoss Vendors:   Red Hat
Red Hat JBoss Flaw in Drools Workbench Component Lets Remote Authenticated Users Traverse the Directory to View Files on the Target System
SecurityTracker Alert ID:  1037406
SecurityTracker URL:  http://securitytracker.com/id/1037406
CVE Reference:   CVE-2016-7041   (Links to External Site)
Date:  Dec 8 2016
Impact:   Disclosure of system information, Disclosure of user information
Fix Available:  Yes  Vendor Confirmed:  Yes  

Description:   A vulnerability was reported in Red Hat JBoss. A remote authenticated user can view files on the target system.

The software does not properly validate user-supplied input. A remote user can supply a specially crafted request to bypass directory restrictions and view arbitrary files on target system.

The vulnerability resides in the Drools Workbench component.

Jonas Bauters (NVISO) reported this vulnerability.

Impact:   A remote authenticated user can view arbitrary files on the target system.
Solution:   Red Hat has issued a fix.

The Red Hat advisories are available at:

https://rhn.redhat.com/errata/RHSA-2016-2937.html
https://rhn.redhat.com/errata/RHSA-2016-2938.html

Vendor URL:  rhn.redhat.com/errata/RHSA-2016-2937.html (Links to External Site)
Cause:   Input validation error
Underlying OS:  Linux (Red Hat Enterprise)

Message History:   None.


 Source Message Contents

Subject:  [RHSA-2016:2937-01] Moderate: Red Hat JBoss BPM Suite security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Moderate: Red Hat JBoss BPM Suite security update
Advisory ID:       RHSA-2016:2937-01
Product:           Red Hat JBoss BPM Suite
Advisory URL:      https://rhn.redhat.com/errata/RHSA-2016-2937.html
Issue date:        2016-12-08
CVE Names:         CVE-2016-7041 
=====================================================================

1. Summary:

An update is now available for Red Hat JBoss BPM Suite.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Description:

This release of Red Hat JBoss BPM Suite 6.3.4 serves as a replacement for
Red Hat JBoss BPM Suite 6.3.3, and includes bug fixes and enhancements,
which are documented in the Release Notes of the patch linked to in the
References section.

Security Fix(es):

* Drools Workbench contains the path traversal vulnerability. The
vulnerability allows a remote, authenticated attacker to bypass the
directory restrictions and retrieve arbitrary files from the affected host.
(CVE-2016-7041)

Red Hat would like to thank Jonas Bauters (NVISO) for reporting this issue.

3. Solution:

Before applying the update, back up your existing installation, including
all applications, configuration files, databases and database settings, and
so on.

It is recommended to halt the server by stopping the JBoss Application
Server process before installing this update; after installing the update,
restart the server by starting the JBoss Application Server process.

The References section of this erratum contains a download link (you must
log in to download the update).

4. Bugs fixed (https://bugzilla.redhat.com/):

1375757 - CVE-2016-7041 Drools Workbench: Path traversal vulnerability

5. References:

https://access.redhat.com/security/cve/CVE-2016-7041
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite&downloadType=securityPatches&version=6.3

6. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2016 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iD8DBQFYSbsyXlSAg2UNWIIRAmchAJ9N4edrwbmWuNkV116cP0GNf6q9+gCfVJcb
paOKIwaLk3KiNdNhcBdojXo=
=lkm0
-----END PGP SIGNATURE-----

--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce
 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC