9.8
CVSSv3

CVE-2017-8045

Published: 27/11/2017 Updated: 12/12/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

In Pivotal Spring AMQP versions before 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.

Vulnerable Product Search on Vulmon Subscribe to Product

pivotal software spring advanced message queuing protocol 1.7.3

pivotal software spring advanced message queuing protocol 1.7.2

pivotal software spring advanced message queuing protocol 1.7.1

pivotal software spring advanced message queuing protocol 1.7.0

pivotal software spring advanced message queuing protocol 1.6.0

pivotal software spring advanced message queuing protocol 1.6.1

pivotal software spring advanced message queuing protocol 1.6.2

pivotal software spring advanced message queuing protocol 1.6.3

pivotal software spring advanced message queuing protocol 1.6.4

pivotal software spring advanced message queuing protocol 1.6.5

pivotal software spring advanced message queuing protocol 1.6.6

pivotal software spring advanced message queuing protocol 1.6.7

pivotal software spring advanced message queuing protocol 1.6.8

pivotal software spring advanced message queuing protocol 1.6.9

pivotal software spring advanced message queuing protocol 1.6.10

pivotal software spring advanced message queuing protocol 1.5.0

pivotal software spring advanced message queuing protocol 1.5.1

pivotal software spring advanced message queuing protocol 1.5.2

pivotal software spring advanced message queuing protocol 1.5.3

pivotal software spring advanced message queuing protocol 1.5.4

pivotal software spring advanced message queuing protocol 1.5.5

pivotal software spring advanced message queuing protocol 1.5.6