{"id":"CVE-2017-1000486","aliases":["EUVD-2021-1339","GHSA-j239-4gqg-5j54"],"status":"published","title":"Inadequate Encryption Strength","description":"Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.94104,"percentile":0.99848,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-326"],"published":"2018-01-03T20:00:00Z","modified":"2026-06-17T00:59:15Z","kev":{"date_added":"2022-01-10","due_date":"2022-07-10","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-01-10"},{"source":"kev","since":"2022-01-10"}],"exploits":[{"source":"metasploit","id":"exploit/multi/http/primefaces_weak_encryption_rce","title":"Primefaces Remote Code Execution Exploit","type":"exploit","platform":"BSD,Linux,OSX,Unix,Windows","date":"2016-02-15","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/primefaces_weak_encryption_rce"},{"source":"exploitdb","id":"EDB-43733","title":"Primefaces 5.x - Remote Code Execution (Metasploit)","type":"webapps","platform":"java","date":"2018-01-18","url":"https://www.exploit-db.com/exploits/43733"},{"source":"pocgithub","id":"pimps/CVE-2017-1000486","title":"pimps/CVE-2017-1000486","date":"2018-09-03","url":"https://github.com/pimps/CVE-2017-1000486"},{"source":"pocgithub","id":"mogwailabs/CVE-2017-1000486","title":"mogwailabs/CVE-2017-1000486","date":"2018-10-17","url":"https://github.com/mogwailabs/CVE-2017-1000486"},{"source":"pocgithub","id":"cved-sources/cve-2017-1000486","title":"cved-sources/cve-2017-1000486","date":"2019-01-11","url":"https://github.com/cved-sources/cve-2017-1000486"},{"source":"pocgithub","id":"Pastea/CVE-2017-1000486","title":"Pastea/CVE-2017-1000486","date":"2021-08-05","url":"https://github.com/Pastea/CVE-2017-1000486"},{"source":"pocgithub","id":"dsssssssm/pwnfaces","title":"dsssssssm/pwnfaces","date":"2022-09-09","url":"https://github.com/dsssssssm/pwnfaces"},{"source":"pocgithub","id":"LongWayHomie/CVE-2017-1000486","title":"LongWayHomie/CVE-2017-1000486","date":"2023-12-15","url":"https://github.com/LongWayHomie/CVE-2017-1000486"},{"source":"pocgithub","id":"jam620/primefaces","title":"jam620/primefaces","date":"2024-02-13","url":"https://github.com/jam620/primefaces"},{"source":"pocgithub","id":"keitan339/primefaces-cve-2017-1000486","title":"keitan339/primefaces-cve-2017-1000486","date":"2026-10-28","url":"https://github.com/keitan339/primefaces-cve-2017-1000486"},{"source":"nuclei","id":"CVE-2017-1000486","title":"Primetek Primefaces 5.x - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000486.yaml"}],"fixes":[{"ecosystem":"Maven","package":"org.primefaces:primefaces","fixed_in":["6.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.primefaces:primefaces","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0"},{"fixed":"6.0"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.primefaces:primefaces","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0"},{"fixed":"6.0"}]}],"versions":["5.0","5.1","5.2","5.3"]}],"products":[{"vendor":"primetek","product":"primefaces"},{"vendor":"primetek","product":"primefaces application"}],"references":[{"url":"https://github.com/primefaces/primefaces/issues/1152","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","web"]},{"url":"https://cryptosense.com/weak-encryption-flaw-in-primefaces/","tags":["x_refsource_MISC","x_transferred","Broken Link","Third Party Advisory"]},{"url":"http://blog.mindedsecurity.com/2016/02/rce-in-oracle-netbeans-opensource.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://www.exploit-db.com/exploits/43733/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-1000486","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000486","tags":["advisory"]},{"url":"https://cryptosense.com/weak-encryption-flaw-in-primefaces","tags":["web"]},{"url":"https://www.exploit-db.com/exploits/43733","tags":["web"]},{"url":"https://github.com/advisories/GHSA-j239-4gqg-5j54"}],"sources":{"cve":[{"id":"CVE-2017-1000486","description":"Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution","status":"published","published":"2018-01-03T20:00:00Z","modified":"2025-10-21T23:45:57.153Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-326"],"updated_at":"2026-11-02T14:33:21.142987Z"}],"euvd":[{"id":"EUVD-2021-1339","description":"Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution","status":"published","published":"2018-01-03T20:00:00Z","modified":"2025-10-21T23:45:57Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-01-10","updated_at":"2026-11-02T20:31:23.427989Z"}],"ghsa":[{"id":"GHSA-j239-4gqg-5j54","title":"Inadequate Encryption Strength","description":"Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution","status":"published","published":"2021-06-03T19:22:22Z","modified":"2025-01-22T21:44:52Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-326"],"updated_at":"2026-11-02T14:38:28.945236Z"}],"kev":[{"id":"CVE-2017-1000486","title":"Primetek Primefaces Remote Code Execution Vulnerability","description":"Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution","cwes":["CWE-326"],"kev":{"date_added":"2022-01-10","due_date":"2022-07-10","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2017-1000486","description":"Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution","status":"published","published":"2018-01-03T20:29:00.643Z","modified":"2026-06-17T00:59:15.417Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-326"],"updated_at":"2026-11-02T14:04:12.690425Z"}],"osv":[{"id":"GHSA-j239-4gqg-5j54","title":"Inadequate Encryption Strength","description":"Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution","status":"published","published":"2021-06-03T19:22:22Z","modified":"2025-01-22T22:00:52.308568Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-326"],"updated_at":"2026-11-02T15:46:49.621585Z"}]}}