PT-2022-12447 · Apache · Apache Tomcat

Delikely · Published 2022-03-21 · Updated 2022-03-28 · CVE-2021-45877

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GARO Wallbox versions (affected versions not specified)

Description The issue concerns hardcoded credentials in the /etc/tomcat8/tomcat-user.xml file, allowing attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manager page.

Recommendations For all affected versions, consider changing the hardcoded credentials in the /etc/tomcat8/tomcat-user.xml file to unique and secure credentials as a temporary workaround. Restrict access to the tomcat manager page on port 8000 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2021-45877

Affected Products

Apache Tomcat

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-45877 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45877 · Vendor Advisory
• https://github.com/delikely/advisory/tree/main/GARO · Note