PT-2017-12602 · Apache+2 · Apache Tomcat+2

Publicado 2017-08-16 · Atualizado 2025-02-21 · CVE-2017-12616

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.80

Description The issue allows bypassing security constraints and/or viewing the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request. This is possible when using a VirtualDirContext with Apache Tomcat.

Recommendations For Apache Tomcat versions 7.0.0 through 7.0.80, update to a version outside of this range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-12616

DLA-1108-1

DLA-1400-1

DLA-1400-2

GHSA-8QQ4-8JVQ-MFW4

MGASA-2017-0352

RHSA-2018:0466

SUSE-SU-2017:3059-1

USN-3665-1

USN-7282-1

Produtos afetados

Apache Tomcat

Suse

Ubuntu

Referências · 64

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb · Exploit
• 🔥 https://github.com/cyberheartmi9/CVE-2017-12617 · Exploit
• 🔥 https://github.com/Pa55w0rd/CVE-2018-1305 · Exploit
• 🔥 https://github.com/LongWayHomie/CVE-2017-12617 · Exploit
• 🔥 https://github.com/knqyf263/CVE-2018-1304 · Exploit
• https://github.com/apache/tomcat · Nota
• https://osv.dev/vulnerability/SUSE-SU-2017:3059-1 · Aviso do Fabricante
• https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E · Nota
• https://access.redhat.com/errata/RHSA-2018:0466 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12616 · Nota
• https://security.netapp.com/advisory/ntap-20171018-0001 · Nota
• https://bugzilla.suse.com/977410 · Nota
• https://lists.apache.org/thread.html/1df9b4552464caa42047062fe7175da0da06c18ecc8daf99258bbda6%40%3Cannounce.tomcat.apache.org%3E · Nota
• https://ubuntu.com/security/notices/USN-7282-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1305 · Aviso do Fabricante