CVE-2017-7674
Last modified
CVE-2017-7674 is a vulnerability of currently unknown severity. The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.. EPSS estimates a 6.84% chance of exploitation in the next 30 days.
Description
The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Apache | Tomcat | 7.0.41 | — |
| Apache | Tomcat | 7.0.42 | — |
| Apache | Tomcat | 7.0.43 | — |
| Apache | Tomcat | 7.0.44 | — |
| Apache | Tomcat | 7.0.45 | — |
| Apache | Tomcat | 7.0.46 | — |
| Apache | Tomcat | 7.0.47 | — |
| Apache | Tomcat | 7.0.48 | — |
| Apache | Tomcat | 7.0.49 | — |
| Apache | Tomcat | 7.0.50 | — |
| Apache | Tomcat | 7.0.52 | — |
| Apache | Tomcat | 7.0.53 | — |
| Apache | Tomcat | 7.0.54 | — |
| Apache | Tomcat | 7.0.55 | — |
| Apache | Tomcat | 7.0.56 | — |
| Apache | Tomcat | 7.0.57 | — |
| Apache | Tomcat | 7.0.58 | — |
| Apache | Tomcat | 7.0.59 | — |
| Apache | Tomcat | 7.0.60 | — |
| Apache | Tomcat | 7.0.61 | — |
| Apache | Tomcat | 7.0.62 | — |
| Apache | Tomcat | 7.0.63 | — |
| Apache | Tomcat | 7.0.64 | — |
| Apache | Tomcat | 7.0.65 | — |
| Apache | Tomcat | 7.0.66 | — |
| Apache | Tomcat | 7.0.67 | — |
| Apache | Tomcat | 7.0.68 | — |
| Apache | Tomcat | 7.0.69 | — |
| Apache | Tomcat | 7.0.70 | — |
| Apache | Tomcat | 7.0.71 | — |
| Apache | Tomcat | 7.0.72 | — |
| Apache | Tomcat | 7.0.73 | — |
| Apache | Tomcat | 7.0.74 | — |
| Apache | Tomcat | 7.0.75 | — |
| Apache | Tomcat | 7.0.76 | — |
| Apache | Tomcat | 7.0.77 | — |
| Apache | Tomcat | 7.0.78 | — |
| Apache | Tomcat | 8.0 | — |
| Apache | Tomcat | 8.0.0 | Rc1 |
| Apache | Tomcat | 8.0.1 | — |
| Apache | Tomcat | 8.0.2 | — |
| Apache | Tomcat | 8.0.3 | — |
| Apache | Tomcat | 8.0.4 | — |
| Apache | Tomcat | 8.0.5 | — |
| Apache | Tomcat | 8.0.6 | — |
| Apache | Tomcat | 8.0.7 | — |
| Apache | Tomcat | 8.0.8 | — |
| Apache | Tomcat | 8.0.9 | — |
| Apache | Tomcat | 8.0.10 | — |
| Apache | Tomcat | 8.0.11 | — |
Showing 50 of 100 affected configurations. See NVD for the full list.
References
- http://www.securityfocus.com/bid/100280Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/100280Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-7674?
How severe is CVE-2017-7674?
How do I fix CVE-2017-7674?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-7668The HTTP strict parsing changes added in Apache httpd 2.2.32…7.5
- CVE-2017-7669In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the …
- CVE-2017-7670The Traffic Router component of the incubating Apache Traffi…
- CVE-2017-7671There is a DOS attack vulnerability in Apache Traffic Server…
- CVE-2017-7672If an application allows enter an URL in a form field and bu…
- CVE-2017-7673Apache OpenMeetings 1.0.0 uses not very strong cryptographic…
- CVE-2017-7675The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0…
- CVE-2017-7676Policy resource matcher in Apache Ranger before 0.7.1 ignore…
- CVE-2017-7677In environments that use external location for hive tables, …
- CVE-2017-7678In Apache Spark before 2.2.0, it is possible for an attacker…
- CVE-2017-7679In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26,…
- CVE-2017-7680Apache OpenMeetings 1.0.0 has an overly permissive crossdoma…
Are you affected by CVE-2017-7674?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST