CVE-2018-1305
MEDIUM severity · CVSS 6.5
6.5CVSS MEDIUM
Summary
Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactHigh
Integrity impactNone
Availability impactNone
Exploit probability (EPSS)15%
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html ↗
Additional information
- NVD record
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlPatch
- http://www.securityfocus.com/bid/103144Advisory
- http://www.securitytracker.com/id/1040428Advisory
- https://access.redhat.com/errata/RHSA-2018:0465Advisory
- https://access.redhat.com/errata/RHSA-2018:0466Advisory
- https://access.redhat.com/errata/RHSA-2018:1320Advisory
- https://access.redhat.com/errata/RHSA-2018:2939Advisory