https://bugzilla.redhat.com/show_bug.cgi?id=1838332
--- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> ---
A deserialization flaw was discovered in Apache Tomcat's use of a FileStore. An
attacker can exploit the flaw if all of the following are true:
* An attacker can control the contents and name of a file on the server.
* The server is configured to use the PersistenceManager with a FileStore.
* The PersistenceManager is configured with
sessionAttributeValueClassNameFilter="null" (the default unless a
SecurityManager is used) or a sufficiently lax filter to allow the attacker-provided
object to be deserialized.
* The attacker knows the relative file path from the storage location used by FileStore to
the file the attacker has control over.
If all these conditions are true, the attacker can use a specially crafted request to
trigger Remote Code Execution through deserialization of the file under their control.
--
You are receiving this mail because:
You are on the CC list for the bug.