CVE-2017-12615

critical-risk
Published 2017-09-19

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Do I need to act?

!
94.2% chance of exploitation in next 30 days
EPSS score — higher than 6% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
1 public exploit available
42953
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.1/10 High
NETWORK / HIGH complexity

Affected Products (20)

Affected Vendors

Apache Netapp Redhat

References (39)

Exploit http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-p...
Broken Link http://www.securityfocus.com/bid/100901
Broken Link http://www.securitytracker.com/id/1039392
Third Party Advisory https://access.redhat.com/errata/RHSA-2017:3080
Third Party Advisory https://access.redhat.com/errata/RHSA-2017:3081
Third Party Advisory https://access.redhat.com/errata/RHSA-2017:3113
Third Party Advisory https://access.redhat.com/errata/RHSA-2017:3114
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0465
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0466
Exploit https://github.com/breaktoprotect/CVE-2017-12615
Mailing List https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c...
Mailing List https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f9...
Mailing List https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85...
Issue Tracking https://lists.apache.org/thread.html/8fcb1e2d5895413abcf266f011b9918ae03e0b7dace...
Mailing List https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0...
Mailing List https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a148555...
Third Party Advisory https://security.netapp.com/advisory/ntap-20171018-0001/
Third Party Advisory https://www.exploit-db.com/exploits/42953/
Third Party Advisory https://www.synology.com/support/security/Synology_SA_17_54_Tomcat
Exploit http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-p...
and 19 more references
77
/ 100
critical-risk
Severity 24/34 · High
Exploitability 27/34 · High
Exposure 26/34 · High