PT-2017-12602 · Apache+2 · Apache Tomcat+2

Published 2017-08-16 · Updated 2025-02-21 · CVE-2017-12616

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.80

Description The issue allows bypassing security constraints and/or viewing the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request. This is possible when using a VirtualDirContext with Apache Tomcat.

Recommendations For Apache Tomcat versions 7.0.0 through 7.0.80, update to a version outside of this range to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-12616

DLA-1108-1

DLA-1400-1

DLA-1400-2

GHSA-8QQ4-8JVQ-MFW4

MGASA-2017-0352

RHSA-2018:0466

SUSE-SU-2017:3059-1

USN-3665-1

USN-7282-1

Affected Products

Apache Tomcat

Suse

Ubuntu

References · 64

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb · Exploit
• 🔥 https://github.com/cyberheartmi9/CVE-2017-12617 · Exploit
• 🔥 https://github.com/Pa55w0rd/CVE-2018-1305 · Exploit
• 🔥 https://github.com/LongWayHomie/CVE-2017-12617 · Exploit
• 🔥 https://github.com/knqyf263/CVE-2018-1304 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2017:3059-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:0466 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7282-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1305 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:0465 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12616 · Security Note
• https://usn.ubuntu.com/3665-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12616 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3665-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-8014 · Vendor Advisory