NetSight
IP …
medium4.3Public exploit code

CVE-2018-11784

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.

Affected products

VendorProductAffected versions
ApacheTomcat
from 7.0.23 through 7.0.90
from 8.5.0 through 8.5.33
from 9.0.1 through 9.0.11
Version 9.0.0
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04
NetappSnap Creator Framework
All versions
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Versions 7.0, 7.6
RedhatEnterprise Linux Server Aus
Version 7.6
RedhatEnterprise Linux Server Eus
Version 7.6
RedhatEnterprise Linux Server Tus
Version 7.6
RedhatEnterprise Linux Workstation
Version 7.0
OracleCommunications Application Session Controller
Versions 3.7.1, 3.8.0
OracleHospitality Guest Access
Versions 4.2.0, 4.2.1

Weakness classification

CWE-601

References