Vulnerabilities > CVE-2017-2658 - Unspecified vulnerability in Redhat products

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
redhat
NVD
Published: 2018-07-27
Updated: 2024-11-21

Summary

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console (clickjacking).

Vulnerable Configurations

Part Description Count
Application
Redhat
12

Redhat

advisories
  • rhsa
    idRHSA-2017:0557
  • rhsa
    idRHSA-2018:2243

References