Every CVE Search/ Get API key

CVE-2017-7552

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x...

9.8 Critical

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.39%Up 0.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.

Record
CVE-2017-7552
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.

Record
CVE-2017-7552
Updated
2026-11-02
EUVDEUVD-2017-16560 No score

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.

Record
EUVD-2017-16560
Updated
2026-11-03
GitHub AdvisoriesGHSA-jc66-7vpm-57fw 9.8

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x...

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.

Record
GHSA-jc66-7vpm-57fw
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:2674 7.5

Red Hat Security Advisory: Red Hat Mobile Application Platform security update

Record
RHSA-2017:2674
CVSS 3.0
7.5 HighCVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fh-system-dump-tool
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:1.0.0-5.el7
0:1.0.0-5.el7
fping
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:3.10-4.el7map
0:3.10-4.el7map
fping-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:3.10-4.el7map
0:3.10-4.el7map
nagios
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-common
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-devel
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-plugins
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-all
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-apt
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
Show 77 moreShow less
Affected packages
PackageAffectedFixed
nagios-plugins-breeze
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-by_ssh
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-cluster
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dbi
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dhcp
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dig
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-disk
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-disk_smb
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dns
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dummy
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-file_age
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-flexlm
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-fping
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-game
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-hpjd
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-http
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-icmp
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ide_smart
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ifoperstatus
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ifstatus
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ircd
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ldap
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-load
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-log
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mailq
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mrtg
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mrtgtraf
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mysql
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-nagios
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-nt
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ntp
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ntp-perl
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-nwstat
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-oracle
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-overcr
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-perl
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-pgsql
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ping
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-procs
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-radius
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-real
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-rpc
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-sensors
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-smtp
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-snmp
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ssh
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-swap
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-tcp
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-time
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ups
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-uptime
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-users
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-wave
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
perl-Crypt-CBC
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.33-2.el7map
0:2.33-2.el7map
perl-Crypt-DES
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.05-20.el7map
0:2.05-20.el7map
perl-Crypt-DES-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.05-20.el7map
0:2.05-20.el7map
perl-Net-SNMP
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:6.0.1-7.el7map
0:6.0.1-7.el7map
phantomjs
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:1.9.7-3.el7map
0:1.9.7-3.el7map
phantomjs-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:1.9.7-3.el7map
0:1.9.7-3.el7map
python-meld3
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:0.6.10-1.el7map
0:0.6.10-1.el7map
python-meld3-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:0.6.10-1.el7map
0:0.6.10-1.el7map
qstat
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.11-13.20080912svn311.el7map
0:2.11-13.20080912svn311.el7map
qstat-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.11-13.20080912svn311.el7map
0:2.11-13.20080912svn311.el7map
radiusclient-ng
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
radiusclient-ng-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
radiusclient-ng-devel
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
radiusclient-ng-utils
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
redis
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.8.21-2.el7map
0:2.8.21-2.el7map
redis-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.8.21-2.el7map
0:2.8.21-2.el7map
rhmap-fh-openshift-templates
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:4.5.0-11.el7
0:4.5.0-11.el7
rhmap-mod_authnz_external
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:3.3.1-7.el7map
0:3.3.1-7.el7map
rhmap-mod_authnz_external-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:3.3.1-7.el7map
0:3.3.1-7.el7map
sendEmail
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:1.56-2.el7
0:1.56-2.el7
ssmtp
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.64-14.el7map
0:2.64-14.el7map
ssmtp-debuginfo
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:2.64-14.el7map
0:2.64-14.el7map
supervisor
Red Hat:mobile_application_platform:4.5
From an advisory covering 4 CVEs
 before 0:3.1.3-3.el7map
0:3.1.3-3.el7map

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7552 is a critical vulnerability (CVSS 9.8) in Redhat Mobile Application Platform, published September 28, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. No source names a fixed version.

References

Show 19 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open