PT-2019-3927 · Apache · Apache Tomcat

Published 2019-04-12 · Updated 2023-12-08 · CVE-2019-0232

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 9.0.0.M1 through 9.0.17 Apache Tomcat versions 8.5.0 through 8.5.39 Apache Tomcat versions 7.0.0 through 7.0.93

Description The issue is related to the CGI Servlet in Apache Tomcat, which is vulnerable to Remote Code Execution when running on Windows with the enableCmdLineArguments option enabled. This is due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default, and the enableCmdLineArguments option is also disabled by default in Tomcat 9.0.x. The vulnerability can be exploited by a remote attacker to execute arbitrary code due to insufficient input validation.

Recommendations For Apache Tomcat versions 9.0.0.M1 through 9.0.17, consider disabling the CGI Servlet or the enableCmdLineArguments option as a temporary workaround. For Apache Tomcat versions 8.5.0 through 8.5.39, consider disabling the CGI Servlet or the enableCmdLineArguments option as a temporary workaround. For Apache Tomcat versions 7.0.0 through 7.0.93, consider disabling the CGI Servlet or the enableCmdLineArguments option as a temporary workaround. As a general mitigation measure, restrict access to the CGI Servlet to minimize the risk of exploitation.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

CWE-20

Related Identifiers

BDU:2019-04405

CVE-2019-0232

GHSA-8VMX-QMCH-MPQG

RHSA-2019:3929

Affected Products

Apache Tomcat

References · 76

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/tomcat_cgi_cmdlineargs.rb · Exploit
• 🔥 https://github.com/pyn3rd/CVE-2019-0232 · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-0232 · Exploit
• 🔥 https://github.com/jaiguptanick/CVE-2019-0232 · Exploit
• 🔥 https://github.com/setrus/CVE-2019-0232 · Exploit
• 🔥 https://github.com/CherishHair/CVE-2019-0232-EXP · Exploit
• 🔥 https://github.com/cyy95/CVE-2019-0232-EXP · Exploit
• 🔥 https://blog.trendmicro.com/trendlabs-security-intelligence/uncovering-cve-2019-0232-a-remote-code-execution-vulnerability-in-apache-tomcat · Exploit
• 🔥 https://packetstormsecurity.com/files/153506/Apache-Tomcat-CGIServlet-enableCmdLineArguments-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/47073 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-0232 · Security Note
• https://bdu.fstec.ru/vul/2019-04405 · Security Note
• https://access.redhat.com/errata/RHSA-2019:1712 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-0232 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8vmx-qmch-mpqg · Vendor Advisory