PT-2019-4683 · Apache+3 · Apache Tomcat+3

Published 2019-04-12 · Updated 2024-07-23 · CVE-2019-0221

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.93 Apache Tomcat versions 8.5.0 through 8.5.39 Apache Tomcat versions 9.0.0.M1 through 9.0.0.17

Description The issue is related to the SSI printenv command in Apache Tomcat, which echoes user-provided data without escaping, making it vulnerable to cross-site scripting (XSS) attacks. This command is intended for debugging purposes and is unlikely to be present in a production website. SSI is disabled by default.

Recommendations For Apache Tomcat versions 7.0.0 through 7.0.93, consider disabling the SSI printenv command as a temporary workaround until a patch is available. For Apache Tomcat versions 8.5.0 through 8.5.39, consider disabling the SSI printenv command as a temporary workaround until a patch is available. For Apache Tomcat versions 9.0.0.M1 through 9.0.0.17, consider disabling the SSI printenv command as a temporary workaround until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2020-2892

ALT-PU-2020-3213

ALT-PU-2021-2858

BDU:2020-01021

CVE-2019-0221

DLA-1810-1

DLA-1883-1

DSA-4596-1

GHSA-JJPQ-GP5Q-8Q6W

MGASA-2019-0260

OPENSUSE-SU-2019:1673-1

OPENSUSE-SU-2019:1808-1

OPENSUSE-SU-2019_1673-1

OPENSUSE-SU-2019_1808-1

OPENSUSE-SU-2024:11468-1

OPENSUSE-SU-2024:13441-1

RHSA-2019:3929

RHSA-2020:0861

SUSE-SU-2019:1693-1

SUSE-SU-2019:1866-1

SUSE-SU-2019:1895-1

SUSE-SU-2020:14375-1

SUSE-SU-2020:1497-1

SUSE-SU-2020:1498-1

SUSE-SU-2020_1497-1

SUSE-SU-2020_1498-1

USN-4128-1

USN-4128-2

USN-6908-1

Affected Products

Alt Linux

Apache Tomcat

Suse

Ubuntu

References · 160

• 🔥 https://exploit-db.com/exploits/50119 · Exploit
• https://osv.dev/vulnerability/USN-4128-2 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1810-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:3929 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/NPHQEL5AQ6LZSZD2Y6TYZ4RC3WI7NXJ3 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQTZ5BJ5F4KV6N53SGNKSW3UY5DBIQ46 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-0221 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:1693-1 · Vendor Advisory
• https://usn.ubuntu.com/4128-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1497-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4128-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPHQEL5AQ6LZSZD2Y6TYZ4RC3WI7NXJ3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-9484 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4128-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:1808-1 · Vendor Advisory