ACE vulnerability in Apache Tomcat

Açıklama

Multiple vulnerabilities was found in Apache Tomcat. Malicious users can exploit this vulnerability to execute arbitrary code and perform cross-site scripting attack.

Below is a complete list of vulnerabilities:

1. A vulnerability in CGI Servlet component can be exploited via due to a bug in the way the JRE passes command line arguments to execute arbitrary code;
2. A vulnerability in SSI printenv command can be exploited to perform cross-site scripting attack.

 

Orijinal öneriler

• Apache Tomcat 8.x Security Vulnerabilities

• Apache Tomcat 7.x Security Vulnerabilities
• Apache Tomcat 9.x Security Vulnerabilities

Kötüye kullanma

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

İlgili ürünler

• Apache-Tomcat

CVE Listesi

• CVE-2019-0232
  critical
• CVE-2019-0221
  high

Daha fazlasını okuyun

Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com