PT-2012-5398 · Apache+2 · Apache Tomcat+2

Published 2012-10-19 · Updated 2022-05-17 · CVE-2012-4431

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.0.0 through 6.0.35 Apache Tomcat versions 7.0.0 through 7.0.31

Description The issue allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier. This occurs when a request is made to a protected resource without a session identifier present in the request.

Recommendations For Apache Tomcat versions 6.0.0 through 6.0.35, update to version 6.0.36 or later. For Apache Tomcat versions 7.0.0 through 7.0.31, update to version 7.0.32 or later.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-264

CWE-352

Related Identifiers

CVE-2012-4431

GHSA-76VR-72MV-MF3Q

HPSBUX02866

RHSA-2013:0266

RHSA-2013:0268

RHSA-2013:0647

Affected Products

Apache Tomcat

Hp-Ux

Suse

References · 33

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/slowloris.py · Exploit
• 🔥 https://github.com/mpgn/CRIME-poc · Exploit
• http://rhn.redhat.com/errata/RHSA-2013-0648.html · Vendor Advisory
• https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00051.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html · Vendor Advisory
• http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1393088&r2=1393087&pathrev=1393088 · Patch
• http://rhn.redhat.com/errata/RHSA-2013-0267.html · Vendor Advisory
• http://ubuntu.com/usn/USN-1685-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0647.html · Vendor Advisory
• http://tomcat.apache.org/security-6.html · Vendor Advisory
• http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/filters/CsrfPreventionFilter.java?r1=1393088&r2=1393087&pathrev=1393088 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2012-4431 · Security Note