CVE-2017-3200
Last modified
CVE-2017-3200 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. The Java implementation of AMF3 deserializers used in GraniteDS, version 3.1.1.G, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this vulnerability depends on the availability of classes in the class path that make use of deserialization. EPSS estimates a 6.15% chance of exploitation in the next 30 days.
Description
The Java implementation of AMF3 deserializers used in GraniteDS, version 3.1.1.G, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this vulnerability depends on the availability of classes in the class path that make use of deserialization. A remote attacker with the ability to spoof or control information may be able to send serialized Java objects with pre-set properties that result in arbitrary code execution when deserialized.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Graniteds | Graniteds | 3.1.1 |
References
- http://www.securityfocus.com/bid/97382Third Party Advisory, VDB Entry
- http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-executionThird Party Advisory
- https://codewhitesec.blogspot.com/2017/04/amf.htmlExploit, Third Party Advisory
- https://www.kb.cert.org/vuls/id/307983Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/97382Third Party Advisory, VDB Entry
- http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-executionThird Party Advisory
- https://codewhitesec.blogspot.com/2017/04/amf.htmlExploit, Third Party Advisory
- https://www.kb.cert.org/vuls/id/307983Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-3200?
How severe is CVE-2017-3200?
How do I fix CVE-2017-3200?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-3194Pandora iOS app prior to version 8.3.2 fails to properly val…
- CVE-2017-3195Commvault Edge Communication Service (cvd) prior to version …9.8
- CVE-2017-3196PCAUSA Rawether framework does not properly validate BPF dat…
- CVE-2017-3197GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F…
- CVE-2017-3198GIGABYTE BRIX UEFI firmware does not cryptographically valid…
- CVE-2017-3199The Java implementation of GraniteDS, version 3.1.1.GA, AMF3…8.1
- CVE-2017-3201The Java implementation of AMF3 deserializers used in Flamin…
- CVE-2017-3202The Java implementation of AMF3 deserializers used in Flamin…
- CVE-2017-3203The Java implementations of AMF3 deserializers in Pivotal/Sp…
- CVE-2017-3204The Go SSH library (x/crypto/ssh) by default does not verify…8.1
- CVE-2017-3206The Java implementation of AMF3 deserializers used by Flamin…
- CVE-2017-3207The Java implementations of AMF3 deserializers in WebORB for…
Are you affected by CVE-2017-3200?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST