CVE-2017-12615
HIGHCVSS 8.1/10Actively ExploitedEPSS 99.61%
Last modified
CVE-2017-12615 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. CISA has confirmed active exploitation in the wild. EPSS estimates a 99.61% chance of exploitation in the next 30 days.
Description
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Tomcat | >= 7.0.0, <= 7.0.79 |
| Netapp | 7-Mode Transition Tool | All versions |
| Netapp | Oncommand Balance | All versions |
| Netapp | Oncommand Shift | All versions |
| Redhat | Enterprise Linux Server Update Services For Sap Solutions | 7.4 |
| Redhat | Enterprise Linux Server Update Services For Sap Solutions | 7.6 |
| Redhat | Enterprise Linux Server Update Services For Sap Solutions | 7.7 |
| Redhat | Jboss Enterprise Web Server | 2.0.0 |
| Redhat | Jboss Enterprise Web Server | 3.0.0 |
| Redhat | Jboss Enterprise Web Server Text-Only Advisories | All versions |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Eus | 7.4 |
| Redhat | Enterprise Linux Eus | 7.5 |
| Redhat | Enterprise Linux Eus | 7.6 |
| Redhat | Enterprise Linux Eus | 7.7 |
| Redhat | Enterprise Linux Eus Compute Node | 7.4 |
| Redhat | Enterprise Linux Eus Compute Node | 7.5 |
| Redhat | Enterprise Linux Eus Compute Node | 7.6 |
| Redhat | Enterprise Linux Eus Compute Node | 7.7 |
| Redhat | Enterprise Linux For Ibm Z Systems | 7.0_s390x |
| Redhat | Enterprise Linux For Ibm Z Systems Eus | 7.4_s390x |
| Redhat | Enterprise Linux For Ibm Z Systems Eus | 7.5_s390x |
| Redhat | Enterprise Linux For Ibm Z Systems Eus | 7.6_s390x |
| Redhat | Enterprise Linux For Ibm Z Systems Eus | 7.7_s390x |
| Redhat | Enterprise Linux For Power Big Endian | 7.0_ppc64 |
| Redhat | Enterprise Linux For Power Big Endian Eus | 7.4_ppc64 |
| Redhat | Enterprise Linux For Power Big Endian Eus | 7.5_ppc64 |
| Redhat | Enterprise Linux For Power Big Endian Eus | 7.6_ppc64 |
| Redhat | Enterprise Linux For Power Big Endian Eus | 7.7_ppc64 |
| Redhat | Enterprise Linux For Power Little Endian | 7.0_ppc64le |
| Redhat | Enterprise Linux For Power Little Endian Eus | 7.4_ppc64le |
| Redhat | Enterprise Linux For Power Little Endian Eus | 7.5_ppc64le |
| Redhat | Enterprise Linux For Power Little Endian Eus | 7.6_ppc64le |
| Redhat | Enterprise Linux For Power Little Endian Eus | 7.7_ppc64le |
| Redhat | Enterprise Linux For Scientific Computing | 7.0 |
| Redhat | Enterprise Linux Server | 6.0 |
| Redhat | Enterprise Linux Server | 7.0 |
| Redhat | Enterprise Linux Server Aus | 7.4 |
| Redhat | Enterprise Linux Server Aus | 7.6 |
| Redhat | Enterprise Linux Server Aus | 7.7 |
| Redhat | Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions | 7.4_ppc64le |
| Redhat | Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions | 7.6_ppc64le |
| Redhat | Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions | 7.7_ppc64le |
| Redhat | Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions | 9.2_ppc64le |
| Redhat | Enterprise Linux Server Tus | 7.4 |
| Redhat | Enterprise Linux Server Tus | 7.6 |
| Redhat | Enterprise Linux Server Tus | 7.7 |
| Redhat | Enterprise Linux Workstation | 6.0 |
| Redhat | Enterprise Linux Workstation | 7.0 |
References
- http://www.securityfocus.com/bid/100901Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039392Broken Link, Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:3080Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3081Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3113Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3114Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0465Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0466Third Party Advisory
- https://github.com/breaktoprotect/CVE-2017-12615Exploit, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20171018-0001/Third Party Advisory
- https://www.exploit-db.com/exploits/42953/Third Party Advisory, VDB Entry
- https://www.synology.com/support/security/Synology_SA_17_54_TomcatThird Party Advisory
- http://www.securityfocus.com/bid/100901Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039392Broken Link, Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:3080Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3081Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3113Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3114Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0465Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0466Third Party Advisory
- https://github.com/breaktoprotect/CVE-2017-12615Exploit, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20171018-0001/Third Party Advisory
- https://www.exploit-db.com/exploits/42953/Third Party Advisory, VDB Entry
- https://www.synology.com/support/security/Synology_SA_17_54_TomcatThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12615US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2017-12615?
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
How severe is CVE-2017-12615?
CVE-2017-12615 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 99.61% probability of exploitation in the next 30 days. This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog.
How do I fix CVE-2017-12615?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2017-12615?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST