Veille CVE
CVE-2017-12615
8.1 Élevée Exploitée activement Utilisée par des rançongicielsCatalogue CISA KEV — Apache Tomcat on Windows Remote Code Execution Vulnerability
Ajoutée le 25/03/2022 · Échéance de correction (agences US) : 15/04/2022
Action requise : Apply updates per vendor instructions.
Description
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Produits concernés
- Apache Software Foundation Apache Tomcat
- Apache tomcat
- Netapp 7-mode transition tool
- Netapp oncommand balance
- Netapp oncommand shift
- Redhat enterprise linux server update services for sap solutions
- Redhat jboss enterprise web server
- Redhat jboss enterprise web server text-only advisories
- Redhat enterprise linux desktop
- Redhat enterprise linux eus
- Redhat enterprise linux eus compute node
- Redhat enterprise linux for ibm z systems
- Redhat enterprise linux for ibm z systems eus
- Redhat enterprise linux for power big endian
- Redhat enterprise linux for power big endian eus
- Redhat enterprise linux for power little endian
- Redhat enterprise linux for power little endian eus
- Redhat enterprise linux for scientific computing
- Redhat enterprise linux server
- Redhat enterprise linux server aus
- Redhat enterprise linux server for power little endian update services for sap solutions
- Redhat enterprise linux server tus
- Redhat enterprise linux workstation
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.1 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 8.1 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 6.8 Moyenne | nvd@nist.gov (NVD) | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Faiblesses (CWE)
Références
- http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.html Exploit
- http://www.securityfocus.com/bid/100901 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039392 Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:3080 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3081 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3113 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3114 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0465 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0466 Third Party Advisory
- https://github.com/breaktoprotect/CVE-2017-12615 ExploitThird Party Advisory
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E Mailing ListPatch
- https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E Mailing ListPatch
- https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E Mailing ListPatch
- https://lists.apache.org/thread.html/8fcb1e2d5895413abcf266f011b9918ae03e0b7daceb118ffbf23f8c%40%3Cannounce.tomcat.apache.org%3E Issue TrackingMailing List
- https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E Mailing List
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E Mailing ListPatch
- https://security.netapp.com/advisory/ntap-20171018-0001/ Third Party Advisory
- https://www.exploit-db.com/exploits/42953/ Third Party AdvisoryVDB Entry
- https://www.synology.com/support/security/Synology_SA_17_54_Tomcat Third Party Advisory
- http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.html Exploit
- http://www.securityfocus.com/bid/100901 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039392 Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:3080 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3081 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3113 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3114 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0465 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0466 Third Party Advisory
- https://github.com/breaktoprotect/CVE-2017-12615 ExploitThird Party Advisory
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E Mailing ListPatch
- https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E Mailing ListPatch
- https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E Mailing ListPatch
- https://lists.apache.org/thread.html/8fcb1e2d5895413abcf266f011b9918ae03e0b7daceb118ffbf23f8c%40%3Cannounce.tomcat.apache.org%3E Issue TrackingMailing List
- https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E Mailing List
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E Mailing ListPatch
- https://security.netapp.com/advisory/ntap-20171018-0001/ Third Party Advisory
- https://www.exploit-db.com/exploits/42953/ Third Party AdvisoryVDB Entry
- https://www.synology.com/support/security/Synology_SA_17_54_Tomcat Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12615 US Government Resource