High · published September 19, 2017
CVSS calls it high at 8.1. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
🚨 An attacker can upload a malicious JSP file with just a crafted request on Tomcat versions 7.0.0 to 7.0.79! 🔥 Think of this like a sneaky delivery driver who gains access to a storage room and leaves a dangerous package directly inside. Once that package is there, anyone can open it up and unleash what's inside without a second glance! If exploited, an attacker could execute arbitrary code on your server simply by uploading their own JSP file. This means they could do anything from stealing sensitive data to taking full control of your system, making it crucial to act fast!
Think of this like a sneaky delivery driver who gains access to a storage room and leaves a dangerous package directly inside. Once that package is there, anyone can open it up and unleash what's inside without a second glance! This vulnerability exists because the HTTP PUT method is enabled, allowing an attacker to upload a JSP file to the server without proper authorization checks. The server then executes any code contained within that uploaded file, leading to potential takeover.
If exploited, an attacker could execute arbitrary code on your server simply by uploading their own JSP file. This means they could do anything from stealing sensitive data to taking full control of your system, making it crucial to act fast! Disable HTTP PUT or restrict it to trusted users only. If you must keep it enabled, upgrade your Tomcat installation to a version higher than 7.0.79 to patch this vulnerability. Don't forget to review your access controls! You've got this! By taking the steps to secure your server, you're on your way to becoming a security hero! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| apache/tomcat | ≥ 7.0.0, ≤ 7.0.79 | — |
| netapp/7-mode_transition_tool | all versions | — |
| netapp/oncommand_balance | all versions | — |
| netapp/oncommand_shift | all versions | — |
| redhat/enterprise_linux_server_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_server_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_server_update_services_for_sap_solutions | all versions | — |
| redhat/jboss_enterprise_web_server | all versions | — |
| redhat/jboss_enterprise_web_server | all versions | — |
| redhat/jboss_enterprise_web_server_text-only_advisories | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus | all versions | — |
| redhat/enterprise_linux_eus_compute_node | all versions | — |
| redhat/enterprise_linux_eus_compute_node | all versions | — |
| redhat/enterprise_linux_eus_compute_node | all versions | — |
| redhat/enterprise_linux_eus_compute_node | all versions | — |
| redhat/enterprise_linux_for_ibm_z_systems | all versions | — |
| redhat/enterprise_linux_for_ibm_z_systems_eus | all versions | — |
| redhat/enterprise_linux_for_ibm_z_systems_eus | all versions | — |
| redhat/enterprise_linux_for_ibm_z_systems_eus | all versions | — |
| redhat/enterprise_linux_for_ibm_z_systems_eus | all versions | — |
| redhat/enterprise_linux_for_power_big_endian | all versions | — |
| redhat/enterprise_linux_for_power_big_endian_eus | all versions | — |
| redhat/enterprise_linux_for_power_big_endian_eus | all versions | — |
| redhat/enterprise_linux_for_power_big_endian_eus | all versions | — |
| redhat/enterprise_linux_for_power_big_endian_eus | all versions | — |
| redhat/enterprise_linux_for_power_little_endian | all versions | — |
| redhat/enterprise_linux_for_power_little_endian_eus | all versions | — |
| redhat/enterprise_linux_for_power_little_endian_eus | all versions | — |
| redhat/enterprise_linux_for_power_little_endian_eus | all versions | — |
| redhat/enterprise_linux_for_power_little_endian_eus | all versions | — |
| redhat/enterprise_linux_for_scientific_computing | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |