Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2017-12634

Published: 15/11/2017 Updated: 07/11/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Camel

Vulnerability Summary

The camel-castor component in Apache Camel 2.x prior to 2.19.4 and 2.20.x prior to 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.

Vulnerable Product Search on Vulmon Subscribe to Product

apache camel

apache camel 2.20.0

Vendor Advisories

Red Hat: Important: Red Hat JBoss Fuse/A-MQ 6.3 R6 security and bug fix update
Synopsis Important: Red Hat JBoss Fuse/A-MQ 63 R6 security and bug fix update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Fuse and Red Hat JBoss A-MQRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabi ...
Red Hat: CVE-2017-12634
It was found that Apache Camel contains a security vulnerability via camel-castor component An attacker can utilize this flaw to deserialize a malicious object on the target machine which could lead to Remote Code Execution (RCE) ...

References

CWE-502https://issues.apache.org/jira/browse/CAMEL-11929http://camel.apache.org/security-advisories.data/CVE-2017-12634.txt.aschttp://www.securityfocus.com/bid/101876https://access.redhat.com/errata/RHSA-2018:0319https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3Ehttps://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3Ehttps://access.redhat.com/errata/RHSA-2018:0319https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2017-12634
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook