CVE-2018-11784
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 94%
from disclosure to weapon1013 days
Published on NVDOct 4
1st PoC+1013d
exploitation probability
94%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Affected
8 products
Red Hat JBoss Data Grid 6 · Red Hat JBoss Data Virtualization 6 · Red Hat JBoss Enterprise Application Platform 6 · Red Hat JBoss Enterprise Web Server 2 · Red Hat JBoss Fuse 6 · and others 3
no_fix_planned: Out of support scope
Fixed
17 products (226 components)
Red Hat Enterprise Linux AppStream (v. 8) · Red Hat JBoss Web Server 3.1 for RHEL 6 · Red Hat JBoss Web Server 3.1 for RHEL 7 · Red Hat JBoss Web Server 5.0 for RHEL 6 Server · Red Hat JBoss Web Server 5.0 for RHEL 7 Server · and others 12
Not affected
11 products (37 components) — because the vulnerable code is not present in the product
Red Hat JBoss Enterprise Web Server 2 · Red Hat Enterprise Linux 6 · Red Hat Software Collections · Red Hat BPM Suite 6 · Red Hat Fuse 7 · and others 6
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
Affected products
Apache Software Foundation · Apache Tomcatpublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/50118unverifiedgithubgithub.com/Cappricio-Securities/CVE-2018-11784★ 0cve_referencepacketstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.htmlhttp://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.htmlhttps://access.redhat.com/errata/RHSA-2019:0130https://access.redhat.com/errata/RHSA-2019:0131https://access.redhat.com/errata/RHSA-2019:0485https://access.redhat.com/errata/RHSA-2019:1529https://kc.mcafee.com/corporate/index?page=content&id=SB10284https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E