CVE-2017-2614 Auth bypass in ovirt-engine-extension-aaa-jdbc

What is CVE-2017-2614?

CVE-2017-2614 is a medium-severity authentication bypass vulnerability in Red Hat ovirt-engine-extension-aaa-jdbc, published on 27 Jul 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired. This would allow access to an attacker with access to change the password on accounts with expired passwords, gaining access to those accounts.

Weakness: CWE-640, CWE-20

Which versions are affected by CVE-2017-2614?

It affects 1 product.

Products include Redhat Enterprise Virtualization.

How do I fix CVE-2017-2614?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2017-2614 being exploited?

There is no known exploitation of CVE-2017-2614 in the wild and no public exploit code.

Other vulnerabilities in Red Hat ovirt-engine-extension-aaa-jdbc

• CVE-2015-5201 Auth bypass in Enterprise Virtualization Hypervisor (aka RHEV-H) High 7.5
• CVE-2013-2151 Privilege escalation in n/a High 7.2
• CVE-2013-2152 Privilege escalation in n/a High 7.2
• CVE-2013-2176 Privilege escalation in n/a High 7.2
• CVE-2016-6338 Security feature bypass in n/a Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-w5vv-xfcc-x3jc, RHSA-2017:0257.