Remote Code Execution Vulnerability in SoapUI by SmartBear
CVE-2017-16670

7.8HIGH

Key Information:

Vendor

Smartbear

Status
Soapui
Vendor
CVE Published:
19 February 2018

What is CVE-2017-16670?

The project import feature in SoapUI 5.3.0 is vulnerable to remote code execution attacks. By crafting a specific request parameter in a WSDL project file, an attacker can exploit this vulnerability to execute arbitrary Java code on the server. This poses a significant risk, allowing unauthorized actions and potential breaches of sensitive information. Administrators are advised to secure the application and apply necessary mitigations to prevent exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://packetstormsecurity.com/files/146339/SoapUI-5.3.0-...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.