https://bugzilla.redhat.com/show_bug.cgi?id=1713275
Bug ID: 1713275
Summary: CVE-2019-0221 tomcat: XSS in SSI printenv
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=moderate,public=20190413,reported=20190523,sour
ce=customer,cvss3=6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U
/C:L/I:L/A:L,epel-all/tomcat=affected,fedora-all/tomca
t=affected,eap-5/jbossweb=affected,eap-6/jbossweb=affe
cted,jdg-6/jbossweb=affected,jdg-7/tomcat=affected,jon
-3/jbossweb=affected,rhel-6/tomcat6=new,rhel-7/tomcat=
new,rhel-8/pki-deps:10.6/pki-servlet-container=new,bpm
s-6/tomcat=affected,brms-5/jbossweb=affected,brms-6/to
mcat=affected,jdv-6/jbossweb=affected,fuse-6/tomcat=af
fected,fuse-7/tomcat=affected
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: darunesh(a)redhat.com
CC: aileenc(a)redhat.com, akoufoud(a)redhat.com,
alazarot(a)redhat.com, alee(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
bmaxwell(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, coolsvap(a)gmail.com,
csutherl(a)redhat.com, darran.lofthouse(a)redhat.com,
dosoudil(a)redhat.com, drieden(a)redhat.com,
etirelli(a)redhat.com, fgavrilo(a)redhat.com,
ibek(a)redhat.com, ivan.afonichev(a)gmail.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jkurik(a)redhat.com,
jochrist(a)redhat.com, jolee(a)redhat.com,
jondruse(a)redhat.com, jschatte(a)redhat.com,
jstastny(a)redhat.com, krathod(a)redhat.com,
krzysztof.daniel(a)gmail.com, kverlaen(a)redhat.com,
lgao(a)redhat.com, loleary(a)redhat.com,
lpetrovi(a)redhat.com, mnovotny(a)redhat.com,
paradhya(a)redhat.com, pgier(a)redhat.com,
pjurak(a)redhat.com, ppalaga(a)redhat.com,
psakar(a)redhat.com, pslavice(a)redhat.com,
rhcs-maint(a)redhat.com, rnetuka(a)redhat.com,
rrajasek(a)redhat.com, rstancel(a)redhat.com,
rsvoboda(a)redhat.com, rsynek(a)redhat.com,
sdaley(a)redhat.com, spinder(a)redhat.com,
theute(a)redhat.com, tom.jenkinson(a)redhat.com,
twalsh(a)redhat.com, vhalbert(a)redhat.com,
vtunka(a)redhat.com
Target Milestone: ---
Classification: Other
The SSI printenv command echoes user provided data without escaping and is,
therefore, vulnerable to XSS. SSI is disabled by default. The printenv command
is intended for debugging and is unlikely to be present in a production
website.
Reference:
http://tomcat.apache.org/security-9.html
Upstream commit:
https://github.com/apache/tomcat/commit/15fcd16
--
You are receiving this mail because:
You are on the CC list for the bug.