CVE-2017-7536

hibernate-validator: Privilege escalation when running under the security manager

View on CVE.org
Published Jan 10, 2018 CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Description
In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue().

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-0525 In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue().
Github GHSA Github GHSA GHSA-xxgp-pcfc-3vgc Privilege Escalation in Hibernate Validator
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00121}

 epss

{'score': 0.00104}
Type Values Removed Values Added
Metrics epss

{'score': 0.00067}

 epss

{'score': 0.00121}
Type Values Removed Values Added
CPEs cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Sep 16, 2024, 5:32 PM
Reserved
Apr 5, 2017, 12:00 AM

View source JSON

No data.

Status
Modified
Published
Jan 10, 2018, 3:29 PM
Modified
Jun 17, 2026, 1:24 AM

View source JSON

Severity
Moderate
Public date
Sep 26, 2017, 12:00 AM

View source Bugzilla JSON

No data.