VDB
RHSA-2018:2243
RHSA-2018:2243
PUBLISHED
CVSS 2.5999999046325684 LOW
It was discovered that the Dashbuilder login page could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console (clickjacking).
Risk Scores
CVSS 3.0
2.5999999046325684
CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat JBoss Data Virtualization 6.4 |
Timeline
- Jul 23, 2018 CVE Published
- Nov 21, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
- Apr 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2018:2243 advisory
- https://access.redhat.com/security/updates/classification/#low advisory
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.services.platform&downloadType=securityPatches&version=6.4 advisory
- https://access.redhat.com/documentation/en-us/red_hat_jboss_data_virtualization/6.4/html/release_notes/ advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1433087 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2243.json advisory
- https://access.redhat.com/security/cve/CVE-2017-2658 advisory
- https://www.cve.org/CVERecord?id=CVE-2017-2658 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2017-2658 advisory