1. Home
  2. Vulnerabilities
  3. CVE-2017-8045

CVE-2017-8045

CVSS v3.0 9.8 (Critical)
98% Progress
CVSS v2.0 7.5 (High)
75% Progress
EPSS 6.84 % (94th)
6.84% Progress
Affected Products 1
Advisories 1
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software Graph Web & Social Timeline

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.

Weaknesses
CWE-502
Deserialization of Untrusted Data
CVE Status
PUBLISHED
CNA
Dell
Published Date
2017-11-27 10:29:00
(6 years ago)
Updated Date
2017-12-12 17:59:20
(6 years ago)

Affected Products

Pivotal Software

Configuration #1

    CPE23 From Up To
  Pivotal Software Spring Advanced Message Queuing Protocol 1.5.0 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.0
  Pivotal Software Spring Advanced Message Queuing Protocol 1.5.0 M1 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.0:m1
  Pivotal Software Spring Advanced Message Queuing Protocol 1.5.0 Rc1 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.0:rc1
  Pivotal Software Spring Advanced Message Queuing Protocol 1.5.1 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.1
  Pivotal Software Spring Advanced Message Queuing Protocol 1.5.2 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.2
  Pivotal Software Spring Advanced Message Queuing Protocol 1.5.3 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.3
  Pivotal Software Spring Advanced Message Queuing Protocol 1.5.4 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.4
  Pivotal Software Spring Advanced Message Queuing Protocol 1.5.5 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.5
  Pivotal Software Spring Advanced Message Queuing Protocol 1.5.6 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.5.6
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.0 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.0
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.0 M1 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.0:m1
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.0 M2 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.0:m2
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.0 Rc1 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.0:rc1
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.1 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.1
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.2 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.2
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.3 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.3
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.4 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.4
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.5 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.5
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.6 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.6
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.7 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.7
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.8 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.8
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.9 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.9
  Pivotal Software Spring Advanced Message Queuing Protocol 1.6.10 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.6.10
  Pivotal Software Spring Advanced Message Queuing Protocol 1.7.0 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.7.0
  Pivotal Software Spring Advanced Message Queuing Protocol 1.7.1 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.7.1
  Pivotal Software Spring Advanced Message Queuing Protocol 1.7.2 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.7.2
  Pivotal Software Spring Advanced Message Queuing Protocol 1.7.3 cpe:2.3:a:pivotal_software:spring_advanced_message_queuing_protocol:1.7.3