CVE-2020-9484

Katalog CVE

CVSS 7.0 · High EPSS 55,5%

Kerentanan Deserialization of Untrusted Data pada apache tomcat, debian linux +15 lainnya. Skor CVSS 3.1 7.0 (High) menurut NVD.

Deskripsi (NVD)

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter="null" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.

Rincian

Terbit di NVD

20 Mei 2020

Terakhir diubah

8 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

55,5% peluang dieksploitasi; lebih tinggi dari 99,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 77 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread.html/r77eae567ed829da9012cadb29af17f2df8fa23bf66faf88229857bb1%40%3Cannounce.t... mailing list · mitigasi · patch · advisory pihak ketiga
• https://www.oracle.com//security-alerts/cpujul2021.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuApr2021.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpujan2021.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpujul2020.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuoct2020.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuoct2021.html patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00057.html advisory pihak ketiga
• http://packetstormsecurity.com/files/157924/Apache-Tomcat-CVE-2020-9484-Proof-Of-Concept.html advisory pihak ketiga · vdb entry
• http://seclists.org/fulldisclosure/2020/Jun/6 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/03/01/2 mailing list · advisory pihak ketiga
• https://kc.mcafee.com/corporate/index?page=content&id=SB10332 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/05/msg00020.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/05/msg00026.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/07/msg00010.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202006-21 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20200528-0005/ advisory pihak ketiga
• https://usn.ubuntu.com/4448-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4596-1/ advisory pihak ketiga
• https://www.debian.org/security/2020/dsa-4727 advisory pihak ketiga
• https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomc...
• https://lists.apache.org/thread.html/r123b3ebe389f46f9d337923f393cdae4d3e9b78d982d706712f0898c%40%3Ccommits.to...
• https://lists.apache.org/thread.html/r26950738f4b4ca2d256597cf391d52d3450fa665c297ea5ca38f5469%40%3Cusers.tomc...
• https://lists.apache.org/thread.html/r7bc247fffcb1d58415215c861d2354bd653c86266230d78a93c71ae2%40%3Cdev.tomcat...