CVE-2010-1871 Red Hat Linux JBoss Seam 2 Remote Code Execution
Remote attackers can execute arbitrary code via crafted URLs in JBoss Seam if the Java Security Manager is not properly configured.
- Exploited in the wild
- Since 10 Dec 2021
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2010-1871?
CVE-2010-1871 is a high-severity code injection vulnerability in Netapp Oncommand Balance, published on 4 Aug 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
Weakness: CWE-917
Which versions are affected by CVE-2010-1871?
It affects 4 products.
Linux distribution packages (4)
jboss-seam2 Red Hat:jboss_enterprise_application_platform:4.3.0::el4 | All versions | 0:2.0.2.FP-1.ep1.24.el4 |
jboss-seam2-docs Red Hat:jboss_enterprise_application_platform:4.3.0::el4 | All versions | 0:2.0.2.FP-1.ep1.24.el4 |
jboss-seam2 Red Hat:jboss_enterprise_application_platform:4.3.0::el5 | All versions | 0:2.0.2.FP-1.ep1.24.el5 |
jboss-seam2-docs Red Hat:jboss_enterprise_application_platform:4.3.0::el5 | All versions | 0:2.0.2.FP-1.ep1.24.el5 |
Products include Netapp Oncommand Balance, Netapp Oncommand Insight, Netapp Oncommand Unified Manager, Redhat Jboss Enterprise Application Platform.
How do I fix CVE-2010-1871?
Change a configuration setting. US federal agencies must fix it by 10 Jun 2022.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2010-1871 being exploited?
Yes. Attackers have exploited CVE-2010-1871 in the wild since at least 10 Dec 2021.
Public exploit code: 2 Metasploit modules and 1 Exploit-DB entry.
Other vulnerabilities in Netapp Oncommand Balance
Sources
Also known as GHSA-r6fv-qmrc-3h24, RHSA-2010:0564.