Description

When running on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Remediation

Upgrade to the latest version of Apache Tomcat. This issue was fixed in Apache Tomcat version 7.0.81.

References

The Case of CVE-2017-12615 Tomcat 7 PUT vulnerability

Fixed_in_Apache_Tomcat_7.0.81

Related Vulnerabilities

CrushFTP SSTI (CVE-2024-4040)

Drupal Core 8.4.x Remote Code Execution (8.4.0 - 8.4.7)

PHP 5.3.9 remote code execution

WordPress Plugin Import XML and RSS Feeds Remote Code Execution (2.1.4)

Apache HTTP Server Insecure Path Normalization (CVE-2021-41773, CVE-2021-42013)

Severity

High

Classification

CVE-2017-12615 CWE-94 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Code Execution