CVE-2017-12615

Katalog CVE

CVSS 8.1 · High KEV · sudah dieksploitasi Dipakai ransomware EPSS 99,6%

Kerentanan Unrestricted Upload of File with Dangerous Type pada apache tomcat, netapp 7-mode transition tool +20 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD. Masuk katalog KEV CISA pada 25 Maret 2022, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Rincian

Terbit di NVD

19 September 2017

Terakhir diubah

6 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

99,6% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Apache Tomcat on Windows Remote Code Execution Vulnerability

Masuk KEV

25 Maret 2022

Tenggat CISA

15 April 2022 (untuk instansi federal AS)

Ransomware

Tercatat dipakai dalam kampanye ransomware

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat... mailing list · patch
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12615 pemerintah AS
• http://www.securityfocus.com/bid/100901 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1039392 broken link · advisory pihak ketiga · vdb entry
• https://access.redhat.com/errata/RHSA-2017:3080 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:3081 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:3113 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2017:3114 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2018:0465 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2018:0466 advisory pihak ketiga
• https://github.com/breaktoprotect/CVE-2017-12615 exploit · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20171018-0001/ advisory pihak ketiga
• https://www.exploit-db.com/exploits/42953/ advisory pihak ketiga · vdb entry
• https://www.synology.com/support/security/Synology_SA_17_54_Tomcat advisory pihak ketiga
• http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.html exploit
• https://lists.apache.org/thread.html/8fcb1e2d5895413abcf266f011b9918ae03e0b7daceb118ffbf23f8c%40%3Cannounce.to... issue tracking · mailing list
• https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.a... mailing list