https://bugzilla.redhat.com/show_bug.cgi?id=1520471
Bug ID: 1520471 Summary: CVE-2017-14949 restlet: XXE vulnerability in XML extension allows remote attackers to access arbitrary files via a crafted REST API HTTP request Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: aileenc@redhat.com, chazlett@redhat.com, gvarsami@redhat.com, java-sig-commits@lists.fedoraproject.org, jcoleman@redhat.com, kconner@redhat.com, ldimaggi@redhat.com, nwallace@redhat.com, pavelp@redhat.com, puntogil@libero.it, rwagner@redhat.com, tcunning@redhat.com, tkirby@redhat.com
Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is related to XmlRepresentation, DOMRepresentation, SaxRepresentation, and JacksonRepresentation.
External References:
https://github.com/restlet/restlet-framework-java/wiki/XEE-security-enhancem...
https://bugzilla.redhat.com/show_bug.cgi?id=1520471
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1520472
--- Comment #1 from Adam Mariš amaris@redhat.com --- Created restlet-jse tracking bugs for this issue:
Affects: fedora-all [bug 1520472]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1520472 [Bug 1520472] CVE-2017-14949 restlet-jse: restlet: XXE vulnerability in XML extension allows remote attackers to access arbitrary files via a crafted REST API HTTP request [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1520471
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1520474
https://bugzilla.redhat.com/show_bug.cgi?id=1520471
Hooman Broujerdi hghasemb@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |1002,reported=20171130,sour |1002,reported=20171130,sour |ce=cve,cvss3=7.0/CVSS:3.0/A |ce=cve,cvss3=7.0/CVSS:3.0/A |V:N/AC:H/PR:N/UI:N/S:U/C:H/ |V:N/AC:H/PR:N/UI:N/S:U/C:H/ |I:L/A:L,cwe=CWE-611,fsw-6/o |I:L/A:L,cwe=CWE-611,fsw-6/o |rg.restlet=new,fuse-6/org.r |rg.restlet=new,fuse-6/Camel |estlet=new,fedora-all/restl |=affected,fedora-all/restle |et-jse=affected |t-jse=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1520471
Pavel Polischouk pavelp@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |1002,reported=20171130,sour |1002,reported=20171129,sour |ce=cve,cvss3=7.0/CVSS:3.0/A |ce=cve,cvss3=7.0/CVSS:3.0/A |V:N/AC:H/PR:N/UI:N/S:U/C:H/ |V:N/AC:H/PR:N/UI:N/S:U/C:H/ |I:L/A:L,cwe=CWE-611,fsw-6/o |I:L/A:L,cwe=CWE-611,fsw-6/o |rg.restlet=new,fuse-6/Camel |rg.restlet=wontfix,fuse-6/C |=affected,fedora-all/restle |amel=affected,fedora-all/re |t-jse=affected |stlet-jse=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1520471
Ondrej Soukup osoukup@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2017 |impact=moderate,public=2017 |1002,reported=20171129,sour |1002,reported=20171130,sour |ce=cve,cvss3=7.0/CVSS:3.0/A |ce=cve,cvss3=7.0/CVSS:3.0/A |V:N/AC:H/PR:N/UI:N/S:U/C:H/ |V:N/AC:H/PR:N/UI:N/S:U/C:H/ |I:L/A:L,cwe=CWE-611,fsw-6/o |I:L/A:L,cwe=CWE-611,fsw-6/o |rg.restlet=wontfix,fuse-6/C |rg.restlet=wontfix,fuse-6/C |amel=affected,fedora-all/re |amel=affected,fedora-all/re |stlet-jse=affected |stlet-jse=affected
java-sig-commits@lists.fedoraproject.org