Description

When running on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Remediation

Upgrade to the latest version of Apache Tomcat. This issue was fixed in Apache Tomcat version 7.0.81.

References

The Case of CVE-2017-12615 Tomcat 7 PUT vulnerability

Fixed_in_Apache_Tomcat_7.0.81

Related Vulnerabilities

Drupal Remote Code Execution (SA-CORE-2018-004)

WordPress Plugin CM Download Manager Code Injection (2.0.3)

WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability (0.6.2 - 2.3.2)

Ruby on Rails weak/known secret token

Umbraco CMS remote code execution

Severity

High

Classification

CVE-2017-12615 CWE-94 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Code Execution