https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Bug ID: 1493220 Summary: CVE-2017-12615 tomcat: Remote Code Execution via JSP Upload Product: Security Response Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: akurtako@redhat.com, alee@redhat.com, apintea@redhat.com, bkundal@redhat.com, bmaxwell@redhat.com, ccoleman@redhat.com, cdewolf@redhat.com, chazlett@redhat.com, csutherl@redhat.com, darran.lofthouse@redhat.com, dedgar@redhat.com, dimitris@redhat.com, dmcphers@redhat.com, dosoudil@redhat.com, felias@redhat.com, fgavrilo@redhat.com, gzaronik@redhat.com, hchiorea@redhat.com, hhorak@redhat.com, ivan.afonichev@gmail.com, java-sig-commits@lists.fedoraproject.org, jawilson@redhat.com, jclere@redhat.com, jcoleman@redhat.com, jdoyle@redhat.com, jgoulding@redhat.com, jolee@redhat.com, jondruse@redhat.com, jorton@redhat.com, jshepherd@redhat.com, krzysztof.daniel@gmail.com, lgao@redhat.com, loleary@redhat.com, mbabacek@redhat.com, me@coolsvap.net, mizdebsk@redhat.com, myarboro@redhat.com, nwallace@redhat.com, pavelp@redhat.com, pgier@redhat.com, pjurak@redhat.com, ppalaga@redhat.com, psakar@redhat.com, pslavice@redhat.com, rnetuka@redhat.com, rstancel@redhat.com, rsvoboda@redhat.com, spinder@redhat.com, sstavrev@redhat.com, theute@redhat.com, twalsh@redhat.com, vhalbert@redhat.com, vtunka@redhat.com, weli@redhat.com
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Affected versions: 7.0.0 to 7.0.79
External References:
https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.81
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |NOTABUG Last Closed| |2017-09-19 12:13:08
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1493229
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
sujay shashank sshashan@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |sshashan@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
sujay shashank sshashan@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |sshashan@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Tomas Hoger thoger@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=notaffected,jws-3/tomcat7= |=notaffected,jws-3/tomcat7= |notaffected,jws-3/tomcat8=n |notaffected,jws-3/tomcat8=n |otaffected,eap-6/tomcat7=no |otaffected,eap-6/tomcat7=no |taffected,jdg-6/jbossweb=no |taffected,jdg-6/jbossweb=no |taffected,jdv-6/jbossweb=no |taffected,jdv-6/jbossweb=no |taffected,eap-6/jbossweb=no |taffected,eap-6/jbossweb=no |taffected,fuse-6/jbossweb=n |taffected,fuse-6/jbossweb=n |otaffected,jon-3/jbossweb=n |otaffected,jon-3/jbossweb=n |otaffected,jpp-6/jbossweb=n |otaffected,jpp-6/jbossweb=n |otaffected,openshift-1/jbos |otaffected,openshift-1/jbos |sweb=notaffected,fedora-all |sweb=notaffected,fedora-all |/tomcat=notaffected,epel-6/ |/tomcat=notaffected,epel-6/ |tomcat=notaffected |tomcat=notaffected,rhel-6/t | |omcat6=notaffected
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |NEW Resolution|NOTABUG |--- Keywords| |Reopened
--- Comment #1 from Adam Mariš amaris@redhat.com --- Upstream patches:
https://svn.apache.org/viewvc?view=revision&revision=1804604 https://svn.apache.org/viewvc?view=revision&revision=1804729
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Adam Mariš amaris@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=notaffected,jws-3/tomcat7= |=new,jws-3/tomcat7=notaffec |notaffected,jws-3/tomcat8=n |ted,jws-3/tomcat8=notaffect |otaffected,eap-6/tomcat7=no |ed,eap-6/tomcat7=notaffecte |taffected,jdg-6/jbossweb=no |d,jdg-6/jbossweb=notaffecte |taffected,jdv-6/jbossweb=no |d,jdv-6/jbossweb=notaffecte |taffected,eap-6/jbossweb=no |d,eap-6/jbossweb=notaffecte |taffected,fuse-6/jbossweb=n |d,fuse-6/jbossweb=notaffect |otaffected,jon-3/jbossweb=n |ed,jon-3/jbossweb=notaffect |otaffected,jpp-6/jbossweb=n |ed,jpp-6/jbossweb=notaffect |otaffected,openshift-1/jbos |ed,openshift-1/jbossweb=not |sweb=notaffected,fedora-all |affected,fedora-all/tomcat= |/tomcat=notaffected,epel-6/ |notaffected,epel-6/tomcat=n |tomcat=notaffected,rhel-6/t |otaffected,rhel-6/tomcat6=n |omcat6=notaffected |otaffected,jbews-2/tomcat6= | |new
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=new,jws-3/tomcat7=notaffec |=affected,jws-3/tomcat7=not |ted,jws-3/tomcat8=notaffect |affected,jws-3/tomcat8=nota |ed,eap-6/tomcat7=notaffecte |ffected,eap-6/tomcat7=notaf |d,jdg-6/jbossweb=notaffecte |fected,jdg-6/jbossweb=notaf |d,jdv-6/jbossweb=notaffecte |fected,jdv-6/jbossweb=notaf |d,eap-6/jbossweb=notaffecte |fected,eap-6/jbossweb=notaf |d,fuse-6/jbossweb=notaffect |fected,fuse-6/jbossweb=nota |ed,jon-3/jbossweb=notaffect |ffected,jon-3/jbossweb=nota |ed,jpp-6/jbossweb=notaffect |ffected,jpp-6/jbossweb=nota |ed,openshift-1/jbossweb=not |ffected,openshift-1/jbosswe |affected,fedora-all/tomcat= |b=notaffected,fedora-all/to |notaffected,epel-6/tomcat=n |mcat=notaffected,epel-6/tom |otaffected,rhel-6/tomcat6=n |cat=notaffected,rhel-6/tomc |otaffected,jbews-2/tomcat6= |at6=notaffected,jbews-2/tom |new |cat6=new
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1493779
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=affected,jws-3/tomcat7=not |=affected,jws-3/tomcat7=not |affected,jws-3/tomcat8=nota |affected,jws-3/tomcat8=nota |ffected,eap-6/tomcat7=notaf |ffected,eap-6/tomcat7=notaf |fected,jdg-6/jbossweb=notaf |fected,jdg-6/jbossweb=notaf |fected,jdv-6/jbossweb=notaf |fected,jdv-6/jbossweb=notaf |fected,eap-6/jbossweb=notaf |fected,eap-6/jbossweb=notaf |fected,fuse-6/jbossweb=nota |fected,fuse-6/jbossweb=nota |ffected,jon-3/jbossweb=nota |ffected,jon-3/jbossweb=nota |ffected,jpp-6/jbossweb=nota |ffected,jpp-6/jbossweb=nota |ffected,openshift-1/jbosswe |ffected,openshift-1/jbosswe |b=notaffected,fedora-all/to |b=notaffected,fedora-all/to |mcat=notaffected,epel-6/tom |mcat=notaffected,epel-6/tom |cat=notaffected,rhel-6/tomc |cat=notaffected,rhel-6/tomc |at6=notaffected,jbews-2/tom |at6=notaffected,jbews-2/tom |cat6=new |cat6=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1493783
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=affected,jws-3/tomcat7=not |=affected,jws-3/tomcat7=aff |affected,jws-3/tomcat8=nota |ected,jws-3/tomcat8=notaffe |ffected,eap-6/tomcat7=notaf |cted,eap-6/tomcat7=notaffec |fected,jdg-6/jbossweb=notaf |ted,jdg-6/jbossweb=notaffec |fected,jdv-6/jbossweb=notaf |ted,jdv-6/jbossweb=notaffec |fected,eap-6/jbossweb=notaf |ted,eap-6/jbossweb=notaffec |fected,fuse-6/jbossweb=nota |ted,fuse-6/jbossweb=notaffe |ffected,jon-3/jbossweb=nota |cted,jon-3/jbossweb=notaffe |ffected,jpp-6/jbossweb=nota |cted,jpp-6/jbossweb=notaffe |ffected,openshift-1/jbosswe |cted,openshift-1/jbossweb=n |b=notaffected,fedora-all/to |otaffected,fedora-all/tomca |mcat=notaffected,epel-6/tom |t=notaffected,epel-6/tomcat |cat=notaffected,rhel-6/tomc |=notaffected,rhel-6/tomcat6 |at6=notaffected,jbews-2/tom |=notaffected,jbews-2/tomcat |cat6=affected |6=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=affected,jws-3/tomcat7=aff |=affected,jws-3/tomcat7=aff |ected,jws-3/tomcat8=notaffe |ected,jws-3/tomcat8=notaffe |cted,eap-6/tomcat7=notaffec |cted,jdg-6/jbossweb=notaffe |ted,jdg-6/jbossweb=notaffec |cted,jdv-6/jbossweb=notaffe |ted,jdv-6/jbossweb=notaffec |cted,eap-6/jbossweb=notaffe |ted,eap-6/jbossweb=notaffec |cted,fuse-6/jbossweb=notaff |ted,fuse-6/jbossweb=notaffe |ected,jon-3/jbossweb=notaff |cted,jon-3/jbossweb=notaffe |ected,jpp-6/jbossweb=notaff |cted,jpp-6/jbossweb=notaffe |ected,openshift-1/jbossweb= |cted,openshift-1/jbossweb=n |notaffected,fedora-all/tomc |otaffected,fedora-all/tomca |at=notaffected,epel-6/tomca |t=notaffected,epel-6/tomcat |t=notaffected,rhel-6/tomcat |=notaffected,rhel-6/tomcat6 |6=notaffected,jbews-2/tomca |=notaffected,jbews-2/tomcat |t6=affected |6=affected |
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=affected,jws-3/tomcat7=aff |=affected,jws-3/tomcat7=aff |ected,jws-3/tomcat8=notaffe |ected,jws-3/tomcat8=notaffe |cted,jdg-6/jbossweb=notaffe |cted,jdg-6/jbossweb=notaffe |cted,jdv-6/jbossweb=notaffe |cted,jdv-6/jbossweb=notaffe |cted,eap-6/jbossweb=notaffe |cted,eap-6/jbossweb=affecte |cted,fuse-6/jbossweb=notaff |d,fuse-6/jbossweb=notaffect |ected,jon-3/jbossweb=notaff |ed,jon-3/jbossweb=notaffect |ected,jpp-6/jbossweb=notaff |ed,jpp-6/jbossweb=notaffect |ected,openshift-1/jbossweb= |ed,openshift-1/jbossweb=not |notaffected,fedora-all/tomc |affected,fedora-all/tomcat= |at=notaffected,epel-6/tomca |notaffected,epel-6/tomcat=n |t=notaffected,rhel-6/tomcat |otaffected,rhel-6/tomcat6=n |6=notaffected,jbews-2/tomca |otaffected,jbews-2/tomcat6= |t6=affected |affected
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1493817, 1493818
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=affected,jws-3/tomcat7=aff |=affected,jws-3/tomcat7=aff |ected,jws-3/tomcat8=notaffe |ected,jws-3/tomcat8=notaffe |cted,jdg-6/jbossweb=notaffe |cted,jdg-6/jbossweb=notaffe |cted,jdv-6/jbossweb=notaffe |cted,jdv-6/jbossweb=notaffe |cted,eap-6/jbossweb=affecte |cted,eap-6/jbossweb=notaffe |d,fuse-6/jbossweb=notaffect |cted,fuse-6/jbossweb=notaff |ed,jon-3/jbossweb=notaffect |ected,jon-3/jbossweb=notaff |ed,jpp-6/jbossweb=notaffect |ected,jpp-6/jbossweb=notaff |ed,openshift-1/jbossweb=not |ected,openshift-1/jbossweb= |affected,fedora-all/tomcat= |notaffected,fedora-all/tomc |notaffected,epel-6/tomcat=n |at=notaffected,epel-6/tomca |otaffected,rhel-6/tomcat6=n |t=notaffected,rhel-6/tomcat |otaffected,jbews-2/tomcat6= |6=notaffected,jbews-2/tomca |affected |t6=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #7 from Doran Moppert dmoppert@redhat.com --- Statement:
This flaw only affects Tomcat instances running on Windows. Linux hosts are not affected.
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jclere@redhat.com Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=affected,jws-3/tomcat7=aff |=affected,jws-3/tomcat7=aff |ected,jws-3/tomcat8=notaffe |ected,jws-3/tomcat8=affecte |cted,jdg-6/jbossweb=notaffe |d,jdg-6/jbossweb=notaffecte |cted,jdv-6/jbossweb=notaffe |d,jdv-6/jbossweb=notaffecte |cted,eap-6/jbossweb=notaffe |d,eap-6/jbossweb=notaffecte |cted,fuse-6/jbossweb=notaff |d,fuse-6/jbossweb=notaffect |ected,jon-3/jbossweb=notaff |ed,jon-3/jbossweb=notaffect |ected,jpp-6/jbossweb=notaff |ed,jpp-6/jbossweb=notaffect |ected,openshift-1/jbossweb= |ed,openshift-1/jbossweb=not |notaffected,fedora-all/tomc |affected,fedora-all/tomcat= |at=notaffected,epel-6/tomca |notaffected,epel-6/tomcat=n |t=notaffected,rhel-6/tomcat |otaffected,rhel-6/tomcat6=n |6=notaffected,jbews-2/tomca |otaffected,jbews-2/tomcat6= |t6=affected |affected
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=notaffected,rhs |cl-2/rh-java-common-tomcat= |cl-2/rh-java-common-tomcat= |notaffected,jbews-2/tomcat7 |notaffected,jbews-2/tomcat7 |=affected,jws-3/tomcat7=aff |=affected,jws-3/tomcat7=aff |ected,jws-3/tomcat8=affecte |ected,jws-3/tomcat8=notaffe |d,jdg-6/jbossweb=notaffecte |cted,jdg-6/jbossweb=notaffe |d,jdv-6/jbossweb=notaffecte |cted,jdv-6/jbossweb=notaffe |d,eap-6/jbossweb=notaffecte |cted,eap-6/jbossweb=notaffe |d,fuse-6/jbossweb=notaffect |cted,fuse-6/jbossweb=notaff |ed,jon-3/jbossweb=notaffect |ected,jon-3/jbossweb=notaff |ed,jpp-6/jbossweb=notaffect |ected,jpp-6/jbossweb=notaff |ed,openshift-1/jbossweb=not |ected,openshift-1/jbossweb= |affected,fedora-all/tomcat= |notaffected,fedora-all/tomc |notaffected,epel-6/tomcat=n |at=notaffected,epel-6/tomca |otaffected,rhel-6/tomcat6=n |t=notaffected,rhel-6/tomcat |otaffected,jbews-2/tomcat6= |6=notaffected,jbews-2/tomca |affected |t6=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Doran Moppert dmoppert@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=notaffected,rhs |el-7/tomcat=affected,rhscl- |cl-2/rh-java-common-tomcat= |2/rh-java-common-tomcat=not |notaffected,jbews-2/tomcat7 |affected,jbews-2/tomcat7=af |=affected,jws-3/tomcat7=aff |fected,jws-3/tomcat7=affect |ected,jws-3/tomcat8=notaffe |ed,jws-3/tomcat8=notaffecte |cted,jdg-6/jbossweb=notaffe |d,jdg-6/jbossweb=notaffecte |cted,jdv-6/jbossweb=notaffe |d,jdv-6/jbossweb=notaffecte |cted,eap-6/jbossweb=notaffe |d,eap-6/jbossweb=notaffecte |cted,fuse-6/jbossweb=notaff |d,fuse-6/jbossweb=notaffect |ected,jon-3/jbossweb=notaff |ed,jon-3/jbossweb=notaffect |ected,jpp-6/jbossweb=notaff |ed,jpp-6/jbossweb=notaffect |ected,openshift-1/jbossweb= |ed,openshift-1/jbossweb=not |notaffected,fedora-all/tomc |affected,fedora-all/tomcat= |at=notaffected,epel-6/tomca |notaffected,epel-6/tomcat=n |t=notaffected,rhel-6/tomcat |otaffected,rhel-6/tomcat6=a |6=notaffected,jbews-2/tomca |ffected,jbews-2/tomcat6=aff |t6=affected |ected
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #8 from Doran Moppert dmoppert@redhat.com --- Statement:
This flaw affects Tomcat on Red Hat Enterprise Linux only if the DefaultServlet is configured with readonly=false. The default configuration has a readonly context, so it is not affected.
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #9 from Doran Moppert dmoppert@redhat.com --- Statement:
This flaw affects Tomcat on Red Hat Enterprise Linux only if the a specific context is configured with readonly=false. The default configuration has a readonly context, so it is not affected.
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #10 from Doran Moppert dmoppert@redhat.com --- Mitigation:
Ensure that readonly is set to true (the default) for the DefaultServlet, WebDAV servlet or application context.
Block HTTP methods that permit resource modification for untrusted users.
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #11 from Doran Moppert dmoppert@redhat.com --- Statement:
This flaw affects Tomcat on Red Hat Enterprise Linux only when a specific context is configured with readonly=false. The default configuration has a readonly context, so it is not affected.
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Doran Moppert dmoppert@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1498343, 1498344, 1498345, | |1498342
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Jennifer Scalf jscalf@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jscalf@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Yasuhiro Ozone yozone@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |yozone@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Doc Text *updated* by Doran Moppert dmoppert@redhat.com --- A vulnerabiity was discovered in Tomcat. If a servlet context was configured with readonly=false and HTTP PUT requests were allowed, an attacker could upload a JSP file to that context and achieve code execution.
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Eric Christensen sparks@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170919,sou |70919,reported=20170918,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=affected,rhscl- |el-7/tomcat=affected,rhscl- |2/rh-java-common-tomcat=not |2/rh-java-common-tomcat=not |affected,jbews-2/tomcat7=af |affected,jbews-2/tomcat7=af |fected,jws-3/tomcat7=affect |fected,jws-3/tomcat7=affect |ed,jws-3/tomcat8=notaffecte |ed,jws-3/tomcat8=notaffecte |d,jdg-6/jbossweb=notaffecte |d,jdg-6/jbossweb=notaffecte |d,jdv-6/jbossweb=notaffecte |d,jdv-6/jbossweb=notaffecte |d,eap-6/jbossweb=notaffecte |d,eap-6/jbossweb=notaffecte |d,fuse-6/jbossweb=notaffect |d,fuse-6/jbossweb=notaffect |ed,jon-3/jbossweb=notaffect |ed,jon-3/jbossweb=notaffect |ed,jpp-6/jbossweb=notaffect |ed,jpp-6/jbossweb=notaffect |ed,openshift-1/jbossweb=not |ed,openshift-1/jbossweb=not |affected,fedora-all/tomcat= |affected,fedora-all/tomcat= |notaffected,epel-6/tomcat=n |notaffected,epel-6/tomcat=n |otaffected,rhel-6/tomcat6=a |otaffected,rhel-6/tomcat6=a |ffected,jbews-2/tomcat6=aff |ffected,jbews-2/tomcat6=aff |ected |ected
--- Doc Text *updated* --- A vulnerability was discovered in Tomcat where if a servlet context was configured with readonly=false and HTTP PUT requests were allowed, an attacker could upload a JSP file to that context and achieve code execution.
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #15 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:3080 https://access.redhat.com/errata/RHSA-2017:3080
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #16 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:3081 https://access.redhat.com/errata/RHSA-2017:3081
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Timothy Walsh twalsh@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1507692
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Richa rmarwaha@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1509003
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1509003 [Bug 1509003] EWS 2.1.1 Bundle-2 2017 BZ
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #17 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat JBoss Web Server
Via RHSA-2017:3114 https://access.redhat.com/errata/RHSA-2017:3114
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #18 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Red Hat JBoss Enterprise Web Server 2 for RHEL 7
Via RHSA-2017:3113 https://access.redhat.com/errata/RHSA-2017:3113
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Viliam Križan vkrizan@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |70919,reported=20170918,sou |70919,reported=20170919,sou |rce=internet,cvss3=8.1/CVSS |rce=internet,cvss3=8.1/CVSS |:3.0/AV:N/AC:H/PR:N/UI:N/S: |:3.0/AV:N/AC:H/PR:N/UI:N/S: |U/C:H/I:H/A:H,cwe=CWE-20,rh |U/C:H/I:H/A:H,cwe=CWE-20,rh |el-7/tomcat=affected,rhscl- |el-7/tomcat=affected,rhscl- |2/rh-java-common-tomcat=not |2/rh-java-common-tomcat=not |affected,jbews-2/tomcat7=af |affected,jbews-2/tomcat7=af |fected,jws-3/tomcat7=affect |fected,jws-3/tomcat7=affect |ed,jws-3/tomcat8=notaffecte |ed,jws-3/tomcat8=notaffecte |d,jdg-6/jbossweb=notaffecte |d,jdg-6/jbossweb=notaffecte |d,jdv-6/jbossweb=notaffecte |d,jdv-6/jbossweb=notaffecte |d,eap-6/jbossweb=notaffecte |d,eap-6/jbossweb=notaffecte |d,fuse-6/jbossweb=notaffect |d,fuse-6/jbossweb=notaffect |ed,jon-3/jbossweb=notaffect |ed,jon-3/jbossweb=notaffect |ed,jpp-6/jbossweb=notaffect |ed,jpp-6/jbossweb=notaffect |ed,openshift-1/jbossweb=not |ed,openshift-1/jbossweb=not |affected,fedora-all/tomcat= |affected,fedora-all/tomcat= |notaffected,epel-6/tomcat=n |notaffected,epel-6/tomcat=n |otaffected,rhel-6/tomcat6=a |otaffected,rhel-6/tomcat6=a |ffected,jbews-2/tomcat6=aff |ffected,jbews-2/tomcat6=aff |ected |ected
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #19 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat JBoss Web Server
Via RHSA-2018:0465 https://access.redhat.com/errata/RHSA-2018:0465
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
--- Comment #20 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat JBoss Web Server 3 for RHEL 6 Red Hat JBoss Web Server 3 for RHEL 7
Via RHSA-2018:0466 https://access.redhat.com/errata/RHSA-2018:0466
java-sig-commits@lists.fedoraproject.org
-
bugzilla＠redhat.com