{"id":"CVE-2017-7552","aliases":["EUVD-2017-16560","GHSA-jc66-7vpm-57fw","RHSA-2017:2674"],"status":"published","title":"A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x...","description":"A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01388,"percentile":0.72447,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2017-09-28T20:00:00Z","modified":"2026-08-05T10:04:45Z","affected":[{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"fh-system-dump-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"fping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10-4.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"fping-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10-4.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.8-8.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.8-8.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.8-8.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.8-8.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-apt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-breeze","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-by_ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-disk_smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-file_age","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-flexlm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-fping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-game","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-hpjd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-icmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ide_smart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ifoperstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ifstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ircd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-load","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-mailq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-mrtg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-mrtgtraf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-nagios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-nt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-nwstat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-overcr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-procs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-radius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-real","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-rpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-sensors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-swap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-tcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-time","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-ups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-uptime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-users","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"nagios-plugins-wave","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"perl-Crypt-CBC","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33-2.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"perl-Crypt-DES","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.05-20.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"perl-Crypt-DES-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.05-20.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"perl-Net-SNMP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.1-7.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"phantomjs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.7-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"phantomjs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.7-3.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"python-meld3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.10-1.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"python-meld3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.10-1.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"qstat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-13.20080912svn311.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"qstat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11-13.20080912svn311.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"radiusclient-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.6-9.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"radiusclient-ng-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.6-9.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"radiusclient-ng-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.6-9.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"radiusclient-ng-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.6-9.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.21-2.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.21-2.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"rhmap-fh-openshift-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-11.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"rhmap-mod_authnz_external","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-7.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"rhmap-mod_authnz_external-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-7.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"sendEmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56-2.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"ssmtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.64-14.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"ssmtp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.64-14.el7map"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.5","package":"supervisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-3.el7map"}]}],"bundled":4}],"products":[{"vendor":"redhat","product":"mobile_application_platform"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:2674","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2675","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1477797","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7552","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jc66-7vpm-57fw"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/red_hat_mobile_application_platform/4.5/html-single/4.5.0_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1480386","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHMAP-16510","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2674.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7552","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7552","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7553","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7553","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7553","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000117","tags":["advisory"]},{"url":"http://blog.recurity-labs.com/2017-08-10/scm-vulns","tags":["article"]},{"url":"https://lkml.org/lkml/2017/8/10/757","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2017-7552","description":"A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.","status":"published","published":"2017-09-28T20:00:00Z","modified":"2024-08-05T16:04:11.972Z","updated_at":"2026-11-02T14:33:20.843976Z"}],"euvd":[{"id":"EUVD-2017-16560","description":"A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.","status":"published","published":"2017-09-28T20:00:00Z","modified":"2024-08-05T16:04:11Z","updated_at":"2026-11-03T02:39:08.024596Z"}],"ghsa":[{"id":"GHSA-jc66-7vpm-57fw","title":"A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x...","description":"A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.","status":"published","published":"2022-05-13T01:47:01Z","modified":"2023-02-02T05:01:27Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:51:11.302625Z"}],"nvd":[{"id":"CVE-2017-7552","description":"A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.","status":"published","published":"2017-09-29T01:34:50.373Z","modified":"2026-06-17T01:24:35.733Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:01.734197Z"}],"osv":[{"id":"RHSA-2017:2674","title":"Red Hat Security Advisory: Red Hat Mobile Application Platform security update","status":"published","published":"2024-09-16T00:31:05Z","modified":"2026-08-05T10:04:45Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"}]}}