Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 2 security update

Fixed packages 64

Vulnerabilities 7

• High 8.1
  CVE-2017-12615 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server

  When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could th…

  Apache Software Foundation Apache Tomcat org.apache.tomcat.embed:tomcat-embed-core Maven
  Sep 19, 2017

  KEV Mar 25, 2022
• High 8.1
  CVE-2017-12617 Exploited Public exploit Scanner template EPSS 100%

  Unrestricted Upload of File with Dangerous Type Apache Tomcat

  When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP fil…

  Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  Oct 3, 2017

  KEV Mar 25, 2022
• High 7.5
  CVE-2017-12616 EPSS 70%

  Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

  When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

  Apache Software Foundation Apache Tomcat tomcat7 org.apache.tomcat:tomcat-catalina Ubuntu Maven
  Sep 19, 2017
• Medium 6.5
  CVE-2018-1305 Public exploit EPSS 14%

  Apache Tomcat information exposure vulnerability

  Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to th…

  Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  Feb 23, 2018
• Medium 5.9
  CVE-2018-1304 Public exploit EPSS 17%

  Apache Tomcat unauthorized access vulnerability

  The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This …

  Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  Feb 28, 2018
• Unscored —
  CVE-2017-12613

  When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable R…

  Apache Software Foundation Apache Portable Runtime apr apr Debian Ubuntu
  Oct 24, 2017
• Unscored —
  CVE-2017-15698

  When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23…

  Apache Software Foundation Apache Tomcat Native tomcat-native tomcat-native Debian Ubuntu
  Jan 31, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1493220
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1493222
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1494283
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1506523
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1540824
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1548282
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1548289
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0466.json
• report
  https://access.redhat.com/security/cve/CVE-2017-12613
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12613
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12613
• article
  http://www.apache.org/dist/apr/Announcement1.x.html
• report
  https://access.redhat.com/security/cve/CVE-2017-12615
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12615
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12615
• article
  https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.81
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2017-12616
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12616
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12616
• report
  https://access.redhat.com/security/cve/CVE-2017-12617
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12617
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12617
• article
  https://tomcat.apache.org/security-7.html
• article
  https://tomcat.apache.org/security-8.html
• report
  https://access.redhat.com/security/cve/CVE-2017-15698
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-15698
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-15698
• report
  https://access.redhat.com/security/cve/CVE-2018-1304
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1304
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1304
• article
  https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.85
• article
  https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.50
• article
  https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.28
• report
  https://access.redhat.com/security/cve/CVE-2018-1305
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1305
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1305