ACE vulnerability in Apache Tomcat

Beschreibung

An remote code-execution vulnerability was found in Apache Tomcat. These vulnerability can be exploited remotely via a specially designed HTTP request. By exploiting these vulnerability malicious users can remotely execute arbitrary code in the context of the affected application.

---

Technical details

This vulnerablity only affects systems with HTTP PUTs enabled, it could be exploited to upload a malicious JSP file to a targeted server.

Ursprüngliche Informationshinweise

• Apache Tomcat 8 vulnerabilities

• Apache Tomcat 8.5 vulnerabilities
• Apache Tomcat 9 vulnerabilities
• Apache Tomcat 7 vulnerabilities

CVE Liste

• CVE-2017-12617
  high

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com