CVE-2017-12617

critical-risk
Published 2017-10-04

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Do I need to act?

!
94.4% chance of exploitation in next 30 days
EPSS score — higher than 6% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
2 public exploits available
43008, 42966
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.1/10 High
NETWORK / HIGH complexity

Affected Products (20)

Affected Vendors

Oracle Debian Redhat Apache Netapp Canonical

References (89)

Patch http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
Patch http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
Patch http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
Third Party Advisory http://www.securityfocus.com/bid/100954
Third Party Advisory http://www.securitytracker.com/id/1039552
Third Party Advisory https://access.redhat.com/errata/RHSA-2017:3080
Third Party Advisory https://access.redhat.com/errata/RHSA-2017:3081
Third Party Advisory https://access.redhat.com/errata/RHSA-2017:3113
Third Party Advisory https://access.redhat.com/errata/RHSA-2017:3114
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0268
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0269
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0270
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0271
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0275
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0465
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:0466
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2939
Mailing List https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55a...
Mailing List https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e8...
Mailing List https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c...
and 69 more references
91
/ 100
critical-risk
Severity 24/34 · High
Exploitability 34/34 · Critical
Exposure 33/34 · Critical