CVE-2017-5648CWE-668

CVE-2017-5648

Critical Β· published April 17, 2017

CVSS v3.0
9.1
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky oversight in Apache Tomcat lets untrusted applications snoop on each other! It’s like letting a guest in your hotel peek into other rooms without permission. 🏨 Think of it as a poorly designed hotel where guests can wander into rooms that aren’t theirs. If an untrusted application is given access, it could potentially peek at or even mess with another application's data, compromising privacy and security. An untrusted application could access and modify information from other web applications running on the same server, leading to data leaks or unauthorized access. This could result in sensitive information being exposed or altered, which is absolutely devastating for web security! ⚑

Put simply

Think of it as a poorly designed hotel where guests can wander into rooms that aren’t theirs. If an untrusted application is given access, it could potentially peek at or even mess with another application's data, compromising privacy and security. This vulnerability arises due to some calls to application listeners not using the appropriate facade object, allowing untrusted apps to retain references to request or response objects. This results in a breach of isolation between web applications running under a SecurityManager.

What to do

An untrusted application could access and modify information from other web applications running on the same server, leading to data leaks or unauthorized access. This could result in sensitive information being exposed or altered, which is absolutely devastating for web security! ⚑ To mitigate this risk, ensure you're using the latest versions of Apache Tomcatβ€”upgrade to at least version 9.0.0.M18, 8.5.12, 8.0.42, or 7.0.76 depending on your current version. Review your application's permissions and security configurations to limit access rights. πŸ›‘οΈ You've got this! With these updates, you’ll help keep your server secure and protect your applications. πŸš€

The record
Technical detail
CVSS v3.0
9.1 Β· CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.13225 Β· 96.4th percentile
Weakness
CWE-668 Β· Exposure of Resource to Wrong Sphere
Published
2017-04-17T20:59Z
Affected products (148)
ProductVersionsFixed in
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
apache/tomcatall versionsβ€”
References (42)
http://www.debian.org/security/2017/dsa-3842 Β· [email protected]http://www.debian.org/security/2017/dsa-3843 Β· [email protected]http://www.openwall.com/lists/oss-security/2020/07/20/8 Β· [email protected]http://www.securityfocus.com/bid/97530 Β· [email protected]http://www.securitytracker.com/id/1038220 Β· [email protected]https://access.redhat.com/errata/RHSA-2017:1801 Β· [email protected]https://access.redhat.com/errata/RHSA-2017:1802 Β· [email protected]https://access.redhat.com/errata/RHSA-2017:1809 Β· [email protected]https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E Β· [email protected]https://security.gentoo.org/glsa/201705-09 Β· [email protected]https://security.netapp.com/advisory/ntap-20180614-0001/ Β· [email protected]http://www.debian.org/security/2017/dsa-3842 Β· af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2017/dsa-3843 Β· af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2020/07/20/8 Β· af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/97530 Β· af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1038220 Β· af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:1801 Β· af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:1802 Β· af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2017:1809 Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E Β· af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201705-09 Β· af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20180614-0001/ Β· af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 17 APR 16:00Z
    While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to…
    cvelistv5