On this page

Atomicorp WAF Research Note: CVE-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (1)

CVE Details

Already protected by existing Atomicorp WAF rules
Protection status: Understanding Atomicorp WAF Protection Status
CVE: CVE-2017-12617
Name: Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (1)
Severity: High
CVSS: 8.1 (v3.1) (High)
CVSS version: 3.1
CVSS source: NVD
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Attack vector: Network
- Attack complexity: High
- Privileges required: None
- User interaction: None
- Scope: Unchanged
- Confidentiality impact: High
- Integrity impact: High
- Availability impact: High
CWE: CWE-434 — Unrestricted Upload of File with Dangerous Type
Related CAPEC attack patterns (via MITRE CWE relationships): CAPEC-1 (opens in a new tab)
Vendor: apache
Vulnerable products: tomcat , ubuntu linux , agile product lifecycle management , communications instant messaging server , endeca information discovery integrator , enterprise manager for mysql database , financial services analytical applications infrastructure , fmw platform , health sciences empirica inspections , hospitality guest access , instantis enterprisetrack , management pack , micros lucas , micros retail xbri loss prevention , mysql enterprise monitor , retail advanced inventory planning , retail back office , retail central office , retail convenience and fuel pos software , retail eftlink , retail insights , retail invoice matching , retail order broker , retail order management system , retail point-of-service , retail price management , retail returns management , retail store inventory management , retail xstore point of service , transportation management , tuxedo system and applications monitor , webcenter sites , workload manager , debian linux , active iq unified manager , oncommand balance , oncommand insight , oncommand shift , oncommand workflow automation , snapcenter , element , fuse , jboss enterprise application platform , jboss enterprise web server , jboss enterprise web server text-only advisories , enterprise linux desktop , enterprise linux eus , enterprise linux eus compute node , enterprise linux for ibm z systems , enterprise linux for ibm z systems eus , enterprise linux for power big endian , enterprise linux for power big endian eus , enterprise linux for power little endian , enterprise linux for power little endian eus , enterprise linux server , enterprise linux server aus , enterprise linux server tus , enterprise linux workstation
CVE published: 2017-10-04
CVE last modified: 2026-08-25
Affected versions (NVD configurations):
- tomcat: >= 7.0.0, < 7.0.82
- tomcat: >= 8.0, < 8.0.47
- tomcat: >= 8.5.0, < 8.5.23
- tomcat: >= 9.0.0, < 9.0.1
- ubuntu linux: 12.04
- ubuntu linux: 16.04
- ubuntu linux: 17.10
- ubuntu linux: 18.04
- agile product lifecycle management: 9.3.3
- agile product lifecycle management: 9.3.4
- agile product lifecycle management: 9.3.5
- agile product lifecycle management: 9.3.6
- communications instant messaging server: 10.0.1
- endeca information discovery integrator: 3.1.0
- endeca information discovery integrator: 3.2.0
- enterprise manager for mysql database: 12.1.0.4.0
- financial services analytical applications infrastructure: >= 7.3.3.0.0, <= 7.3.5.3.0
- financial services analytical applications infrastructure: >= 8.0.0.0.0, <= 8.0.9.0.0
- fmw platform: 12.2.1.2.0
- fmw platform: 12.2.1.3.0
- health sciences empirica inspections: 1.0.1.1
- hospitality guest access: 4.2.0
- hospitality guest access: 4.2.1
- instantis enterprisetrack: 17.1
- instantis enterprisetrack: 17.2
- management pack: 11.2.1.0.13
- micros lucas: 2.9.5
- micros retail xbri loss prevention: 10.0.1
- micros retail xbri loss prevention: 10.5.0
- micros retail xbri loss prevention: 10.6.0
- micros retail xbri loss prevention: 10.7.0
- micros retail xbri loss prevention: 10.8.0
- micros retail xbri loss prevention: 10.8.1
- mysql enterprise monitor: <= 3.3.6.3293
- mysql enterprise monitor: >= 3.4.0, <= 3.4.4.4226
- mysql enterprise monitor: >= 4.0.0, <= 4.0.0.5135
- retail advanced inventory planning: 13.2
- retail advanced inventory planning: 13.4
- retail advanced inventory planning: 14.1
- retail advanced inventory planning: 15.0
- retail back office: 14.0.4
- retail back office: 14.1.3
- retail central office: 14.0.4
- retail central office: 14.1.3
- retail convenience and fuel pos software: 2.1.132
- retail eftlink: 1.1.124
- retail eftlink: 15.0.1
- retail eftlink: 16.0.2
- retail insights: 14.0
- retail insights: 14.1
- retail insights: 15.0
- retail insights: 16.0
- retail invoice matching: 12.0
- retail invoice matching: 13.0
- retail invoice matching: 13.1
- retail invoice matching: 13.2
- retail invoice matching: 14.0
- retail invoice matching: 14.1
- retail invoice matching: 15.0
- retail invoice matching: 16.0
- retail order broker: 5.0
- retail order broker: 5.1
- retail order broker: 5.2
- retail order broker: 15.0
- retail order broker: 16.0
- retail order management system: 4.0
- retail order management system: 4.5
- retail order management system: 4.7
- retail order management system: 5.0
- retail point-of-service: 14.0.4
- retail point-of-service: 14.1.3
- retail price management: 12.0
- retail price management: 13.0
- retail price management: 13.1
- retail price management: 13.2
- retail price management: 14.0
- retail price management: 14.1
- retail price management: 15.0
- retail price management: 16.0
- retail returns management: 2.3.8
- retail returns management: 2.4.9
- retail returns management: 14.0.4
- retail returns management: 14.1.3
- retail store inventory management: 12.0.12
- retail store inventory management: 13.0.7
- retail store inventory management: 13.1.9
- retail store inventory management: 13.2.9
- retail store inventory management: 14.0.4
- retail store inventory management: 14.1.3
- retail store inventory management: 15.0.2
- retail store inventory management: 16.0.1
- retail xstore point of service: 6.0.11
- retail xstore point of service: 7.0.6
- retail xstore point of service: 7.1.6
- retail xstore point of service: 15.0.1
- transportation management: 6.3.1
- transportation management: 6.3.2
- transportation management: 6.3.3
- transportation management: 6.3.4
- transportation management: 6.3.5
- transportation management: 6.3.6
- transportation management: 6.3.7
- tuxedo system and applications monitor: 12.1.3.0.0
- webcenter sites: 11.1.1.8.0
- workload manager: 12.2.0.1
- debian linux: 7.0
- active iq unified manager: >= 7.3
- active iq unified manager: >= 9.5
- oncommand balance
- oncommand insight
- oncommand shift
- oncommand workflow automation
- snapcenter
- element
- fuse: 1.0
- jboss enterprise application platform: 6.0.0
- jboss enterprise application platform: 6.4.0
- jboss enterprise web server: 2.0.0
- jboss enterprise web server: 3.0.0
- jboss enterprise web server text-only advisories
- enterprise linux desktop: 6.0
- enterprise linux desktop: 7.0
- enterprise linux eus: 7.4
- enterprise linux eus: 7.5
- enterprise linux eus: 7.6
- enterprise linux eus: 7.7
- enterprise linux eus compute node: 7.4
- enterprise linux eus compute node: 7.5
- enterprise linux eus compute node: 7.6
- enterprise linux eus compute node: 7.7
- enterprise linux for ibm z systems: 6.0_s390x
- enterprise linux for ibm z systems: 7.0_s390x
- enterprise linux for ibm z systems eus: 7.4_s390x
- enterprise linux for ibm z systems eus: 7.5_s390x
- enterprise linux for ibm z systems eus: 7.6_s390x
- enterprise linux for ibm z systems eus: 7.7_s390x
- enterprise linux for power big endian: 6.0_ppc64
- enterprise linux for power big endian: 7.0_ppc64
- enterprise linux for power big endian eus: 7.4_ppc64
- enterprise linux for power big endian eus: 7.5_ppc64
- enterprise linux for power big endian eus: 7.6_ppc64
- enterprise linux for power big endian eus: 7.7_ppc64
- enterprise linux for power little endian: 7.0
- enterprise linux for power little endian eus: 7.4_ppc64le
- enterprise linux for power little endian eus: 7.5_ppc64le
- enterprise linux for power little endian eus: 7.6_ppc64le
- enterprise linux for power little endian eus: 7.7_ppc64le
- enterprise linux server: 6.0
- enterprise linux server: 7.0
- enterprise linux server aus: 7.4
- enterprise linux server aus: 7.6
- enterprise linux server aus: 7.7
- enterprise linux server tus: 7.4
- enterprise linux server tus: 7.6
- enterprise linux server tus: 7.7
- enterprise linux workstation: 6.0
- enterprise linux workstation: 7.0
EPSS: 0.9999; 100.0th percentile (FIRST (opens in a new tab) )
CISA KEV: Listed (added 2022-03-25)
- Known ransomware campaign use: Unknown
Latest Update: 2026-09-12
Selected Rule IDs observed: 345493 , 392301
Matching rules: 2; rules with blocking actions: 1
Would-block Rule IDs: 392301
Request surfaces inspected: Request headers

Technical CPE data

This section lists vulnerable CPE matches retained from the NVD configurations. It supplements the readable affected-product information above.

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
- Version start (inclusive): 7.0.0
- Version end (exclusive): 7.0.82
- NVD match criteria ID: A7286E06-DA84-401D-8FB8-DEEF6A171C88
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
- Version start (inclusive): 8.0
- Version end (exclusive): 8.0.47
- NVD match criteria ID: 2C385FE9-F78C-49BC-AE87-5FE1A9BD7ED3
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
- Version start (inclusive): 8.5.0
- Version end (exclusive): 8.5.23
- NVD match criteria ID: EF72650E-5826-4ABB-9B7D-43C96DB3B9B7
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
- Version start (inclusive): 9.0.0
- Version end (exclusive): 9.0.1
- NVD match criteria ID: 817D7E47-947E-4A2F-A8AB-1302D5DF6684
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
- NVD match criteria ID: 8D305F7A-D159-4716-AB26-5E38BB5CD991
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- NVD match criteria ID: 7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
- NVD match criteria ID: 9070C9D8-A14A-467F-8253-33B966C16886
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
- NVD match criteria ID: B3293E55-5506-4587-A318-D1734F781C09
cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.3:*:*:*:*:*:*:*
- NVD match criteria ID: F8C893E4-1D3A-4687-BE5A-D26FFEBCCC78
cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:*:*:*:*:*:*:*
- NVD match criteria ID: 18260EE8-9BC0-4BA1-9642-90FE052E8B18
cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*
- NVD match criteria ID: B0BB81C3-29FD-4AE0-8D46-456FAF135F6C
cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*
- NVD match criteria ID: 4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2
cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1:*:*:*:*:*:*:*
- NVD match criteria ID: 622B95F1-8FA4-4AA6-9B68-5FE4302BA150
cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.1.0:*:*:*:*:*:*:*
- NVD match criteria ID: 8B65CD29-C729-42AC-925E-014BA19581E2
cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0:*:*:*:*:*:*:*
- NVD match criteria ID: 7E856B4A-6AE7-4317-921A-35B4D2048652
cpe:2.3:a:oracle:enterprise_manager_for_mysql_database:12.1.0.4.0:*:*:*:*:*:*:*
- NVD match criteria ID: 815E0C5E-00DF-4AD2-AE97-A752B3DC1631
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
- Version start (inclusive): 7.3.3.0.0
- Version end (inclusive): 7.3.5.3.0
- NVD match criteria ID: 4C3CFCCE-A8D4-4B78-9C37-88238580B5DA
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
- Version start (inclusive): 8.0.0.0.0
- Version end (inclusive): 8.0.9.0.0
- NVD match criteria ID: 9380A86A-7A58-477F-A697-B6692E18B4B9
cpe:2.3:a:oracle:fmw_platform:12.2.1.2.0:*:*:*:*:*:*:*
- NVD match criteria ID: 657387A7-DFD9-4CDC-968A-3F3970FDE224
cpe:2.3:a:oracle:fmw_platform:12.2.1.3.0:*:*:*:*:*:*:*
- NVD match criteria ID: 9C5E9A12-BFE9-4963-A360-A34168A6BF6A
cpe:2.3:a:oracle:health_sciences_empirica_inspections:1.0.1.1:*:*:*:*:*:*:*
- NVD match criteria ID: 26CD44C0-F9DD-46F0-A4C1-2C2639217B4D
cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*
- NVD match criteria ID: 1A3DC116-2844-47A1-BEC2-D0675DD97148
cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*
- NVD match criteria ID: E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94
cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*
- NVD match criteria ID: 82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4
cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*
- NVD match criteria ID: B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4
cpe:2.3:a:oracle:management_pack:11.2.1.0.13:*:*:*:*:goldengate:*:*
- NVD match criteria ID: 5EB9E1EA-E136-4B09-9BBB-D7D48D993349
cpe:2.3:a:oracle:micros_lucas:2.9.5:*:*:*:*:*:*:*
- NVD match criteria ID: 98EE20FD-3D21-4E23-95B8-7BD13816EB95
cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.0.1:*:*:*:*:*:*:*
- NVD match criteria ID: 78933DD0-F774-4E60-BC66-D5A57919717A
cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.5.0:*:*:*:*:*:*:*
- NVD match criteria ID: 8ECA7A7E-8177-4FD4-B9B9-F4B1B6F43F98
cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.6.0:*:*:*:*:*:*:*
- NVD match criteria ID: 73C9A2AD-F384-44D5-AB33-86B7250760A5
cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.7.0:*:*:*:*:*:*:*
- NVD match criteria ID: EEB4EB87-5ABB-437D-BDAC-FB64F33929FA
cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.0:*:*:*:*:*:*:*
- NVD match criteria ID: FA3F5761-E2A0-4F67-BAE1-503877676BF3
cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.1:*:*:*:*:*:*:*
- NVD match criteria ID: C1E3C86B-4483-430A-856D-7EAB7D388D2E
cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*
- Version end (inclusive): 3.3.6.3293
- NVD match criteria ID: FF9C223C-BC90-4253-A009-53DEDEE9C1CC
cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*
- Version start (inclusive): 3.4.0
- Version end (inclusive): 3.4.4.4226
- NVD match criteria ID: 52886BA2-204E-4F0E-B22F-CE5FDFCC98B5
cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*
- Version start (inclusive): 4.0.0
- Version end (inclusive): 4.0.0.5135
- NVD match criteria ID: 6470AB3F-ADE2-4BA2-A6B9-E094C927CC77
cpe:2.3:a:oracle:retail_advanced_inventory_planning:13.2:*:*:*:*:*:*:*
- NVD match criteria ID: D8193A06-3F6B-4F5A-AA58-B1B0AB3A87A3
cpe:2.3:a:oracle:retail_advanced_inventory_planning:13.4:*:*:*:*:*:*:*
- NVD match criteria ID: FE65A212-7385-4973-A9C8-FB9C2F9F745F
cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1:*:*:*:*:*:*:*
- NVD match criteria ID: 56239DBD-E294-44A4-9DD3-CEEC58C1BC0C
cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0:*:*:*:*:*:*:*
- NVD match criteria ID: 517E0654-F1DE-43C4-90B5-FB90CA31734B
cpe:2.3:a:oracle:retail_back_office:14.0.4:*:*:*:*:*:*:*
- NVD match criteria ID: FB363B97-8D71-4FC5-AF88-B6A0040E3D04
cpe:2.3:a:oracle:retail_back_office:14.1.3:*:*:*:*:*:*:*
- NVD match criteria ID: 92978070-A3FD-45E7-8A19-C6324116416B
cpe:2.3:a:oracle:retail_central_office:14.0.4:*:*:*:*:*:*:*
- NVD match criteria ID: 74D44D74-4402-4569-B335-AFB5F80424ED
cpe:2.3:a:oracle:retail_central_office:14.1.3:*:*:*:*:*:*:*
- NVD match criteria ID: 5ABB11E1-AD2A-47AA-A5AA-49D94B50CEC3
cpe:2.3:a:oracle:retail_convenience_and_fuel_pos_software:2.1.132:*:*:*:*:*:*:*
- NVD match criteria ID: DA5B8931-D3B4-46A9-B1A0-9A6BBA365FC8
cpe:2.3:a:oracle:retail_eftlink:1.1.124:*:*:*:*:*:*:*
- NVD match criteria ID: BD00C4A5-D05A-4C64-A50C-B8CE182FFB5E
cpe:2.3:a:oracle:retail_eftlink:15.0.1:*:*:*:*:*:*:*
- NVD match criteria ID: 25AC9F0D-4476-41AC-A7AB-5DE52135D8D7
cpe:2.3:a:oracle:retail_eftlink:16.0.2:*:*:*:*:*:*:*
- NVD match criteria ID: A4DF6FE2-35CB-43AB-95F4-40C909DEC69F
cpe:2.3:a:oracle:retail_insights:14.0:*:*:*:*:*:*:*
- NVD match criteria ID: 5DCCBA87-C934-4B94-A5F2-B459FF9CBEC6
cpe:2.3:a:oracle:retail_insights:14.1:*:*:*:*:*:*:*
- NVD match criteria ID: 1D962EF0-D6E1-4B1F-9F50-0E30C3B5CF4A
cpe:2.3:a:oracle:retail_insights:15.0:*:*:*:*:*:*:*
- NVD match criteria ID: 9B3935CB-58D4-49A4-B3D4-D0DA0CD12F38
cpe:2.3:a:oracle:retail_insights:16.0:*:*:*:*:*:*:*
- NVD match criteria ID: 269BCEDB-57A1-4611-A009-29791E0EF9A4
cpe:2.3:a:oracle:retail_invoice_matching:12.0:*:*:*:*:*:*:*
- NVD match criteria ID: 51D1FAEE-65FD-47EB-9F4D-505C72000F3A
cpe:2.3:a:oracle:retail_invoice_matching:13.0:*:*:*:*:*:*:*
- NVD match criteria ID: 4C45FF05-FB76-4782-891E-F4A8A4871A22
cpe:2.3:a:oracle:retail_invoice_matching:13.1:*:*:*:*:*:*:*
- NVD match criteria ID: 5C03ED7B-3826-4D6D-89C5-61DE12E27213
cpe:2.3:a:oracle:retail_invoice_matching:13.2:*:*:*:*:*:*:*
- NVD match criteria ID: 8893CB1D-F18C-404D-BC06-CA2617BFAE58
cpe:2.3:a:oracle:retail_invoice_matching:14.0:*:*:*:*:*:*:*
- NVD match criteria ID: 42227DD8-6671-4B38-9E42-4ACF78F09C97
cpe:2.3:a:oracle:retail_invoice_matching:14.1:*:*:*:*:*:*:*
- NVD match criteria ID: 69962BD9-A102-4621-9461-018E87261657
cpe:2.3:a:oracle:retail_invoice_matching:15.0:*:*:*:*:*:*:*
- NVD match criteria ID: 788F2530-F011-4489-8029-B3468BAF7787
cpe:2.3:a:oracle:retail_invoice_matching:16.0:*:*:*:*:*:*:*
- NVD match criteria ID: 7D939BB4-9D34-43A4-A19C-1CC90DB748FD
cpe:2.3:a:oracle:retail_order_broker:5.0:*:*:*:*:*:*:*
- NVD match criteria ID: C4E864D4-96C0-4FD5-993F-7E2472893FF6
cpe:2.3:a:oracle:retail_order_broker:5.1:*:*:*:*:*:*:*
- NVD match criteria ID: EAA4DF85-9225-4422-BF10-D7DAE7DCE007
cpe:2.3:a:oracle:retail_order_broker:5.2:*:*:*:*:*:*:*
- NVD match criteria ID: 77C2A2A4-285B-40A1-B9AD-42219D742DD4
cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*
- NVD match criteria ID: EE8CF045-09BB-4069-BCEC-496D5AE3B780
cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*
- NVD match criteria ID: 38E74E68-7F19-4EF3-AC00-3C249EAAA39E
cpe:2.3:a:oracle:retail_order_management_system:4.0:*:*:*:*:*:*:*
- NVD match criteria ID: 01FFED25-C781-45CA-8F3B-7A75D5F1E126
cpe:2.3:a:oracle:retail_order_management_system:4.5:*:*:*:*:*:*:*
- NVD match criteria ID: DA5092E0-0F34-4330-BE16-B0D5FF4C91E4
cpe:2.3:a:oracle:retail_order_management_system:4.7:*:*:*:*:*:*:*
- NVD match criteria ID: BBBC99BE-E550-482C-B759-6032E6593D09
cpe:2.3:a:oracle:retail_order_management_system:5.0:*:*:*:*:*:*:*
- NVD match criteria ID: 66CAA1FF-02B0-4479-8349-DEB19208A21C
cpe:2.3:a:oracle:retail_point-of-service:14.0.4:*:*:*:*:*:*:*
- NVD match criteria ID: 5C47CC5A-5A12-4058-9F60-A50E2D2040BE
cpe:2.3:a:oracle:retail_point-of-service:14.1.3:*:*:*:*:*:*:*
- NVD match criteria ID: A1CE1F19-1F07-4CBB-9930-F47394ED8054
cpe:2.3:a:oracle:retail_price_management:12.0:*:*:*:*:*:*:*
- NVD match criteria ID: FABD1A02-06F9-48A7-A22D-10DCD24938E7
cpe:2.3:a:oracle:retail_price_management:13.0:*:*:*:*:*:*:*
- NVD match criteria ID: 06992F7E-3BCA-4489-AD12-534C50CE6E6D
cpe:2.3:a:oracle:retail_price_management:13.1:*:*:*:*:*:*:*
- NVD match criteria ID: F6D3F48B-E5F3-4412-815A-6C1E23E98674
cpe:2.3:a:oracle:retail_price_management:13.2:*:*:*:*:*:*:*
- NVD match criteria ID: C19C5CC9-544A-4E4D-8F0A-579BB5270F07
cpe:2.3:a:oracle:retail_price_management:14.0:*:*:*:*:*:*:*
- NVD match criteria ID: 891E192D-BA12-4D89-8D18-C93D2F26A369
cpe:2.3:a:oracle:retail_price_management:14.1:*:*:*:*:*:*:*
- NVD match criteria ID: 5B956113-5B3B-436D-858B-8F29FB304364
cpe:2.3:a:oracle:retail_price_management:15.0:*:*:*:*:*:*:*
- NVD match criteria ID: 7E8917F6-00E7-47EC-B86D-A3B11D5F0E0D
cpe:2.3:a:oracle:retail_price_management:16.0:*:*:*:*:*:*:*
- NVD match criteria ID: EFC5F424-119D-4C66-8251-E735EEFBC0BA
cpe:2.3:a:oracle:retail_returns_management:2.3.8:*:*:*:*:*:*:*
- NVD match criteria ID: 4B31A871-77CF-455F-A28A-FBCE595D51DB
cpe:2.3:a:oracle:retail_returns_management:2.4.9:*:*:*:*:*:*:*
- NVD match criteria ID: 892B1AB5-B0DC-4E57-B22F-0196A9F22CE7
cpe:2.3:a:oracle:retail_returns_management:14.0.4:*:*:*:*:*:*:*
- NVD match criteria ID: 0E9002D8-133F-4AB2-8475-4B0A464D0021
cpe:2.3:a:oracle:retail_returns_management:14.1.3:*:*:*:*:*:*:*
- NVD match criteria ID: B529695B-B859-4A1B-9873-6C870201879F
cpe:2.3:a:oracle:retail_store_inventory_management:12.0.12:*:*:*:*:*:*:*
- NVD match criteria ID: F26748F3-1952-43B2-8847-264257ECBF10
cpe:2.3:a:oracle:retail_store_inventory_management:13.0.7:*:*:*:*:*:*:*
- NVD match criteria ID: 142391D3-E38C-4F0E-9BB1-034DC28FAF75
cpe:2.3:a:oracle:retail_store_inventory_management:13.1.9:*:*:*:*:*:*:*
- NVD match criteria ID: 555925C7-3345-48F8-9FD9-0E6C1E83E960
cpe:2.3:a:oracle:retail_store_inventory_management:13.2.9:*:*:*:*:*:*:*
- NVD match criteria ID: 0953CAB4-B627-419D-9B8A-7C776A4FC18F
cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:*:*:*:*:*:*:*
- NVD match criteria ID: 0E703304-0752-46F2-998B-A3D37C9E7A54
cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3:*:*:*:*:*:*:*
- NVD match criteria ID: 722969B5-36CD-4413-954B-347BB7E51FAE
cpe:2.3:a:oracle:retail_store_inventory_management:15.0.2:*:*:*:*:*:*:*
- NVD match criteria ID: C5BE74EA-FC65-4A23-B5AA-1FC97390ADAB
cpe:2.3:a:oracle:retail_store_inventory_management:16.0.1:*:*:*:*:*:*:*
- NVD match criteria ID: 8AAFAA67-42E9-4B4E-9DC7-A38275FD45CB
cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0.11:*:*:*:*:*:*:*
- NVD match criteria ID: B7A0E714-AC23-49B5-A36C-D10FA4699561
cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.6:*:*:*:*:*:*:*
- NVD match criteria ID: 89B3354D-3929-4AEC-AAE0-7F573341FD6C
cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.6:*:*:*:*:*:*:*
- NVD match criteria ID: 55901EF7-B71C-40B3-B276-FDA6381F051F
cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.1:*:*:*:*:*:*:*
- NVD match criteria ID: 385D40CC-5AA0-4DAB-A2E7-F3A3CFF95BA7
cpe:2.3:a:oracle:transportation_management:6.3.1:*:*:*:*:*:*:*
- NVD match criteria ID: E7A714FB-050A-4040-BC57-C22FA4DD58D2
cpe:2.3:a:oracle:transportation_management:6.3.2:*:*:*:*:*:*:*
- NVD match criteria ID: A775321B-6DFB-4770-8F6D-D34D655438AF
cpe:2.3:a:oracle:transportation_management:6.3.3:*:*:*:*:*:*:*
- NVD match criteria ID: 835BB7D9-633C-4CB3-8E8F-CA6FD62E587A
cpe:2.3:a:oracle:transportation_management:6.3.4:*:*:*:*:*:*:*
- NVD match criteria ID: 48FE41BA-1E3C-4626-930F-3F8FEE124A78
cpe:2.3:a:oracle:transportation_management:6.3.5:*:*:*:*:*:*:*
- NVD match criteria ID: 40F284EF-05CF-4CF5-B7CA-F58AE01DA3B6
cpe:2.3:a:oracle:transportation_management:6.3.6:*:*:*:*:*:*:*
- NVD match criteria ID: C09892E8-D580-488A-A80E-B358D682A25A
cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*
- NVD match criteria ID: A58642E0-CA59-4DE6-A83C-F551FC621C32
cpe:2.3:a:oracle:tuxedo_system_and_applications_monitor:12.1.3.0.0:*:*:*:*:*:*:*
- NVD match criteria ID: D7072B3F-88AE-4432-879B-9D8208C67C74
cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*
- NVD match criteria ID: 1BB4709C-6373-43CC-918C-876A6569865A
cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*
- NVD match criteria ID: AD848FE1-CFD7-490C-B008-DF3B30F3256F
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- NVD match criteria ID: 16F59A04-14CF-49E2-9973-645477EA09DA
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*
- Version start (inclusive): 7.3
- NVD match criteria ID: BD075607-09B7-493E-8611-66D041FFDA62
cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*
- Version start (inclusive): 9.5
- NVD match criteria ID: 0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
- NVD match criteria ID: 7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
- NVD match criteria ID: F1BE6C1F-2565-4E97-92AA-16563E5660A5
cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*
- NVD match criteria ID: 3BD81527-A341-42C3-9AB9-880D3DB04B08
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
- NVD match criteria ID: 5735E553-9731-4AAC-BCFF-989377F817B3
cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*
- NVD match criteria ID: BDFB1169-41A0-4A86-8E4F-FDA9730B1E94
cpe:2.3:o:netapp:element:-:*:*:*:*:vcenter_server:*:*
- NVD match criteria ID: 5E1DE4F5-9094-4C73-AA1B-5C902F38DD24
cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:*
- NVD match criteria ID: 077732DB-F5F3-4E9C-9AC0-8142AB85B32F
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*
- NVD match criteria ID: B142ACCC-F7A9-4A3B-BE60-0D6691D5058D
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*
- NVD match criteria ID: B1ABA871-3271-48E2-A69C-5AD70AF94E53
cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*
- NVD match criteria ID: 681173DF-537E-4A64-8FC7-75F439CCAD0D
cpe:2.3:a:redhat:jboss_enterprise_web_server:3.0.0:*:*:*:*:*:*:*
- NVD match criteria ID: 8E2F2F98-DB90-43F6-8F28-3656207B6188
cpe:2.3:a:redhat:jboss_enterprise_web_server_text-only_advisories:-:*:*:*:*:*:*:*
- NVD match criteria ID: 08E5BFFC-F3E0-43E6-BA40-81B2A8B7CC01
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- NVD match criteria ID: EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- NVD match criteria ID: 33C068A4-3780-4EAB-A937-6082DF847564
cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*
- NVD match criteria ID: F96E3779-F56A-45FF-BB3D-4980527D721E
cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
- NVD match criteria ID: 0CF73560-2F5B-4723-A8A1-9AADBB3ADA00
cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
- NVD match criteria ID: 5BF3C7A5-9117-42C7-BEA1-4AA378A582EF
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
- NVD match criteria ID: 83737173-E12E-4641-BC49-0BD84A6B29D0
cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.4:*:*:*:*:*:*:*
- NVD match criteria ID: 46DD0CA2-3786-4E97-A60C-5043FDDBCB86
cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.5:*:*:*:*:*:*:*
- NVD match criteria ID: 55E4609A-C986-4041-A528-1B4B37E1F6F6
cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.6:*:*:*:*:*:*:*
- NVD match criteria ID: 92BDD126-A468-47D9-A468-6E229D75939D
cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.7:*:*:*:*:*:*:*
- NVD match criteria ID: 6DAA8C42-870A-42B4-AE9F-7C67F4122ED3
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:*
- NVD match criteria ID: C84EAAE7-0249-4EA1-B8D3-E039B03ACDC3
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*
- NVD match criteria ID: 2148300C-ECBD-4ED5-A164-79629859DD43
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:*
- NVD match criteria ID: B908AEF5-67CE-42D4-961D-C0E7ADB78ADD
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:*
- NVD match criteria ID: 0F8EB695-5EA3-46D2-941E-D7F01AB99A48
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x:*:*:*:*:*:*:*
- NVD match criteria ID: 1E1DB003-76B8-4D7B-A6ED-5064C3AE1C11
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:*:*:*:*:*:*:*
- NVD match criteria ID: FFC68D88-3CD3-4A3D-A01B-E9DBACD9B9CB
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:*
- NVD match criteria ID: 6D8D654F-2442-4EA0-AF89-6AC2CD214772
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:*
- NVD match criteria ID: 8BCF87FD-9358-42A5-9917-25DF0180A5A6
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*
- NVD match criteria ID: 9B8B2E32-B838-4E51-BAA2-764089D2A684
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*
- NVD match criteria ID: 4319B943-7B19-468D-A160-5895F7F997A3
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:*
- NVD match criteria ID: 39C1ABF5-4070-4AA7-BAB8-4F63E1BD91FF
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*
- NVD match criteria ID: 8036E2AE-4E44-4FA5-AFFB-A3724BFDD654
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*
- NVD match criteria ID: B4A684C7-88FD-43C4-9BDB-AE337FCBD0AB
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:*
- NVD match criteria ID: E9A24D0C-604D-4421-AFA6-5D541DA2E94D
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:*
- NVD match criteria ID: 3A2E3637-B6A6-4DA9-8B0A-E91F22130A45
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le:*:*:*:*:*:*:*
- NVD match criteria ID: F81F859C-DA89-4D1E-91D3-A000AD646203
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:*:*:*:*:*:*:*
- NVD match criteria ID: 418488A5-2912-406C-9337-B8E85D0C2B57
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- NVD match criteria ID: 9BBCD86A-E6C7-4444-9D74-F861084090F0
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- NVD match criteria ID: 51EF4996-72F4-4FA4-814F-F5991E7A8318
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
- NVD match criteria ID: D99A687E-EAE6-417E-A88E-D0082BC194CD
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
- NVD match criteria ID: B353CE99-D57C-465B-AAB0-73EF581127D1
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
- NVD match criteria ID: 7431ABC1-9252-419E-8CC1-311B41360078
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*
- NVD match criteria ID: D5F7E11E-FB34-4467-8919-2B6BEAABF665
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
- NVD match criteria ID: B76AA310-FEC7-497F-AF04-C3EC1E76C4CC
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
- NVD match criteria ID: 17F256A9-D3B9-4C72-B013-4EFD878BFEA8
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- NVD match criteria ID: E5ED5807-55B7-47C5-97A6-03233F4FBC3A
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
- NVD match criteria ID: 825ECE2D-E232-46E0-A047-074B34DB1E97

Vulnerability Description

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Recommended Actions

Maintain the observed Atomicorp protections. Keep your Atomicorp commercial rules current and confirm that the selected observed rules (345493 , 392301 ) have not been locally disabled. Atomicorp commercial rules are enabled by default. If you use Atomic WAF, review the applicable policy and rule settings.
Apply the vendor’s remediation. WAF protection is defense in depth and does not replace upgrading or following the affected vendor’s guidance.
- Affected versions: Apache Software Foundation Apache Tomcat version 9.0.0.M1 to 9.0.0.
- Affected versions: Apache Software Foundation Apache Tomcat version 8.5.0 to 8.5.22.
- Affected versions: Apache Software Foundation Apache Tomcat version 8.0.0.RC1 to 8.0.46.
- Affected versions: Apache Software Foundation Apache Tomcat version 7.0.0 to 7.0.81.
- The CVE record does not include written upgrade or workaround instructions, but it does publish the following patch or mitigation reference:
- CISA KEV required action: Apply updates per vendor instructions.
- CISA KEV federal remediation due date: 2022-04-15
Validate after changes. Confirm rule updates are current, review WAF events for the affected application, and test application behavior after vendor upgrades, mitigations, or local policy changes.

Research Notes

Atomicorp WAF protections are designed around attack techniques and exploit behaviors, allowing existing protections to apply across multiple vulnerabilities without requiring a unique rule for every CVE.

Public Vulnerability References

NVD (opens in a new tab)
CVE Record (opens in a new tab)
Patch or mitigation: http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html (opens in a new tab)
Patch or mitigation: http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html (opens in a new tab)
Patch or mitigation: http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html (opens in a new tab)
Exploit or technical research: http://www.securityfocus.com/bid/100954 (opens in a new tab)
Exploit or technical research: http://www.securitytracker.com/id/1039552 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2017:3080 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2017:3081 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2017:3113 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2017:3114 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2018:0268 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2018:0269 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2018:0270 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2018:0271 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2018:0275 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2018:0465 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2018:0466 (opens in a new tab)
Exploit or technical research: https://access.redhat.com/errata/RHSA-2018:2939 (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
CVE authority reference: https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb%40%3Cannounce.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Patch or mitigation: https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E (opens in a new tab)
Exploit or technical research: https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html (opens in a new tab)
Exploit or technical research: https://security.netapp.com/advisory/ntap-20171018-0002/ (opens in a new tab)
Exploit or technical research: https://security.netapp.com/advisory/ntap-20180117-0002/ (opens in a new tab)
Exploit or technical research: https://support.f5.com/csp/article/K53173544 (opens in a new tab)
Exploit or technical research: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us (opens in a new tab)
Exploit or technical research: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us (opens in a new tab)
Exploit or technical research: https://usn.ubuntu.com/3665-1/ (opens in a new tab)
Exploit or technical research: https://www.exploit-db.com/exploits/42966/ (opens in a new tab)
Exploit or technical research: https://www.exploit-db.com/exploits/43008/ (opens in a new tab)
Patch or mitigation: https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html (opens in a new tab)
CVE authority reference: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12617 (opens in a new tab)

Test or Research Source

Source: Exploit-DB 42953 (opens in a new tab)
Tags: CVE-2017-12615, CVE-2017-12617, apache, cve, cve2017, exploitdb, http, intrusive, kev, rce, replay, tomcat, vkev, vuln

Research Note Context

This research note documents exploit-technique analysis associated with this vulnerability and references Atomicorp WAF protections observed during engineering review, testing, or validation activities.

Atomicorp security controls are generally designed to identify and mitigate attack techniques and exploit behaviors rather than individual CVE identifiers. As a result, protections developed for one vulnerability may also apply to related attack variants and future vulnerabilities using similar techniques.

Learn More

Atomicorp develops commercially supported security technologies for web applications, servers, endpoints, workloads, and legacy enterprise platforms.

Organizations interested in protecting systems against exploit techniques associated with vulnerabilities such as this one can learn more about:

Atomic ModSecurity Rules: commercially maintained WAF rules for ModSecurity deployments, including protections for web attacks, bots, scanners, malware, exploitation attempts, and emerging vulnerability classes.
Atomic WAF: an enterprise web application firewall with Atomicorp rules, centralized management, reporting, authentication controls, and operational tooling.
Atomic ModSecurity Integrator: a special licensing option for MSPs, MSSPs, OEMs, VARs, reverse proxy providers, and other integrators who want to incorporate Atomicorp ModSecurity rule technology into their own products or services.
Atomic OSSEC: an enterprise OSSEC-based intrusion detection, compliance, and security monitoring platform.
Atomic Protector: workload protection for Linux, web, cloud, data center, and hybrid environments.

For additional information, product evaluations, or technical discussions, visit https://www.atomicorp.com/ or https://modsecurity.io/ (opens in a new tab) .