CVE-2017-1000486: Inadequate Encryption Strength

June 3, 2021 (updated January 22, 2025)

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

References

cryptosense.com/weak-encryption-flaw-in-primefaces
github.com/advisories/GHSA-j239-4gqg-5j54
github.com/primefaces/primefaces/issues/1152
nvd.nist.gov/vuln/detail/CVE-2017-1000486
www.exploit-db.com/exploits/43733

Code Behaviors & Features

Detect and mitigate CVE-2017-1000486 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →