Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
    (CVE-2017-1000486)

PrimeTek PrimeFaces used on the remote host is affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted message, to execute arbitrary code.

In affected versions of PrimeFaces, an expression language injection vulnerability exists that would allow an unauthenticated user to execute arbitrary code due to a weak encryption flaw.

ID	Name	Product	Family	Severity
416050	SCA: security update for org.primefaces:primefaces (GHSA-j239-4gqg-5j54)	Tenable Cloud Security	SCA Checks	critical
416050	SCA: security update for org.primefaces:primefaces (GHSA-j239-4gqg-5j54)	Tenable Self-Hosted Container Security	SCA Checks	critical
168478	PrimeTek PrimeFaces Remote Code Execution (CVE-2017-1000486)	Nessus	CGI abuses	critical
113119	PrimeFaces 4.0.x < 4.0.25 / 5.x < 5.2.21 / 5.3.x < 5.3.8 Expression Language Injection	Web App Scanning	Component Vulnerability	critical

Detections

Analytics

CVE-2017-1000486

critical

Tenable Plugins

critical

critical

critical

critical