CVE-2017-12617
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.
ssvc Actcvss 8.1epss 100%
de la publicación al arma2 días
Publicada en NVD3 oct
1ª PoC+2d
metasploit3 oct
CISA KEV+1634d
probabilidad de explotación
100%top 1% de las CVE
explotación observada
síCISA + VulnCheck
30 exploit(s) público(s)
Acción exigida por CISAplazo federal: 2022-04-15
Apply updates per vendor instructions.
Investigado y redactado con IA a partir del advisory del fabricante y análisis públicos, con las fuentes citadas. Verifica siempre la versión corregida en el advisory oficial antes de actuar.
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Apache Software Foundation · Apache TomcatPoCs públicas encontradas — 30✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/42966exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/43008githubgithub.com/cyberheartmi9/CVE-2017-12617★ 399githubgithub.com/LongWayHomie/CVE-2017-12617★ 4githubgithub.com/ygouzerh/CVE-2017-12617★ 2githubgithub.com/K3ysTr0K3R/CVE-2017-12617-EXPLOIT★ 1githubgithub.com/tyranteye666/tomcat-cve-2017-12617★ 1githubgithub.com/jptr218/tc_hack★ 1githubgithub.com/scirusvulgaris/CVE-2017-12617★ 0githubgithub.com/yZee00/CVE-2017-12617★ 0githubgithub.com/DevaDJ/CVE-2017-12617★ 0githubgithub.com/devcoinfet/CVE-2017-12617★ 0githubgithub.com/qiantu88/CVE-2017-12617★ 0vulncheckvulncheck.com/xdb/4d32b8f34452no verificadovulncheckvulncheck.com/xdb/8fd4c4b18c5fno verificadovulncheckvulncheck.com/xdb/b858a57a9e2eno verificadocve_referencewww.exploit-db.com/exploits/42966/no verificadocve_referencewww.exploit-db.com/exploits/43008/no verificadovulncheckvulncheck.com/xdb/89ebe594235fno verificadovulncheckvulncheck.com/xdb/a95e521b14feno verificadovulncheckvulncheck.com/xdb/bd768a95e919no verificadovulncheckvulncheck.com/xdb/c42eddecf666no verificadovulncheckvulncheck.com/xdb/4659f86bc8f1no verificadovulncheckvulncheck.com/xdb/c733f0b8ba46no verificadovulncheckvulncheck.com/xdb/0cbcf731ead7no verificadovulncheckvulncheck.com/xdb/c34ae4bbbf1eno verificadovulncheckvulncheck.com/xdb/d105c8c6f54fno verificadovulncheckvulncheck.com/xdb/476468103ba2no verificadovulncheckvulncheck.com/xdb/7804de914c0cno verificadovulncheckvulncheck.com/xdb/f5e54c16d591no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://access.redhat.com/errata/RHSA-2017:3080https://access.redhat.com/errata/RHSA-2017:3081https://access.redhat.com/errata/RHSA-2017:3113https://access.redhat.com/errata/RHSA-2017:3114https://access.redhat.com/errata/RHSA-2018:0268https://access.redhat.com/errata/RHSA-2018:0269https://access.redhat.com/errata/RHSA-2018:0270https://access.redhat.com/errata/RHSA-2018:0271https://access.redhat.com/errata/RHSA-2018:0275https://access.redhat.com/errata/RHSA-2018:0465https://access.redhat.com/errata/RHSA-2018:0466https://access.redhat.com/errata/RHSA-2018:2939