CVE-2017-12617
100Vexday Risk Score
Corrija agora. Ela está sob exploração confirmada pelo CISA e tem exploit funcional público.
ssvc Actcvss 8.1epss 100%
da publicação à arma2 dias
Publicada no NVD3 de out.
1ª PoC+2d
metasploit3 de out.
CISA KEV+1634d
probabilidade de exploração
100%top 1% das CVEs
exploração observada
simCISA + VulnCheck
30 exploit(s) público(s)
Ação exigida pela CISAprazo federal: 2022-04-15
Apply updates per vendor instructions.
Pesquisado e redigido com IA a partir do advisory do fornecedor e de análises públicas, com as fontes acima. Confira sempre a versão corrigida no advisory oficial antes de agir.
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Apache Software Foundation · Apache TomcatPoCs públicas encontradas — 30✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/42966exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/43008githubgithub.com/cyberheartmi9/CVE-2017-12617★ 399githubgithub.com/LongWayHomie/CVE-2017-12617★ 4githubgithub.com/ygouzerh/CVE-2017-12617★ 2githubgithub.com/K3ysTr0K3R/CVE-2017-12617-EXPLOIT★ 1githubgithub.com/tyranteye666/tomcat-cve-2017-12617★ 1githubgithub.com/jptr218/tc_hack★ 1githubgithub.com/scirusvulgaris/CVE-2017-12617★ 0githubgithub.com/yZee00/CVE-2017-12617★ 0githubgithub.com/DevaDJ/CVE-2017-12617★ 0githubgithub.com/devcoinfet/CVE-2017-12617★ 0githubgithub.com/qiantu88/CVE-2017-12617★ 0vulncheckvulncheck.com/xdb/4d32b8f34452não verificadovulncheckvulncheck.com/xdb/8fd4c4b18c5fnão verificadovulncheckvulncheck.com/xdb/b858a57a9e2enão verificadocve_referencewww.exploit-db.com/exploits/42966/não verificadocve_referencewww.exploit-db.com/exploits/43008/não verificadovulncheckvulncheck.com/xdb/89ebe594235fnão verificadovulncheckvulncheck.com/xdb/a95e521b14fenão verificadovulncheckvulncheck.com/xdb/bd768a95e919não verificadovulncheckvulncheck.com/xdb/c42eddecf666não verificadovulncheckvulncheck.com/xdb/4659f86bc8f1não verificadovulncheckvulncheck.com/xdb/c733f0b8ba46não verificadovulncheckvulncheck.com/xdb/0cbcf731ead7não verificadovulncheckvulncheck.com/xdb/c34ae4bbbf1enão verificadovulncheckvulncheck.com/xdb/d105c8c6f54fnão verificadovulncheckvulncheck.com/xdb/476468103ba2não verificadovulncheckvulncheck.com/xdb/7804de914c0cnão verificadovulncheckvulncheck.com/xdb/f5e54c16d591não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://access.redhat.com/errata/RHSA-2017:3080https://access.redhat.com/errata/RHSA-2017:3081https://access.redhat.com/errata/RHSA-2017:3113https://access.redhat.com/errata/RHSA-2017:3114https://access.redhat.com/errata/RHSA-2018:0268https://access.redhat.com/errata/RHSA-2018:0269https://access.redhat.com/errata/RHSA-2018:0270https://access.redhat.com/errata/RHSA-2018:0271https://access.redhat.com/errata/RHSA-2018:0275https://access.redhat.com/errata/RHSA-2018:0465https://access.redhat.com/errata/RHSA-2018:0466https://access.redhat.com/errata/RHSA-2018:2939