CVE-2017-12615

Published: Sep 19, 2017Modified: Apr 21, 2026CISA KEV

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Affected (50)

Products: Apache: Tomcat · Netapp: 7 Mode Transition Tool, Oncommand Balance, Oncommand Shift · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Eus Compute Node, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Big Endian, Enterprise Linux For Power Big Endian Eus, Enterprise Linux For Power Little Endian, Enterprise Linux For Power Little Endian Eus, Enterprise Linux For Scientific Computing, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions, Enterprise Linux Server Tus, Enterprise Linux Server Update Services For Sap Solutions, Enterprise Linux Workstation, Jboss Enterprise Web Server, Jboss Enterprise Web Server Text Only Advisories

Apache

1 product

Tomcat

Netapp

3 products

7 Mode Transition Tool

Oncommand Balance

Oncommand Shift

Redhat

18 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Eus Compute Node

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Power Big Endian

Enterprise Linux For Power Big Endian Eus

Enterprise Linux For Power Little Endian

Enterprise Linux For Power Little Endian Eus

Enterprise Linux For Scientific Computing

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions

Enterprise Linux Server Tus

Enterprise Linux Server Update Services For Sap Solutions

Enterprise Linux Workstation

Jboss Enterprise Web Server

Jboss Enterprise Web Server Text Only Advisories

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Apache Tomcat	From 7.0.0 to 7.0.79

Running on/with	Platform Versions
Microsoft Windows	All versions

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Netapp 7 Mode Transition Tool	All versions
Netapp Oncommand Balance	All versions
Netapp Oncommand Shift	All versions

Configuration C

46 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Eus Compute Node	Version 7.4
Redhat Enterprise Linux Eus Compute Node	Version 7.5
Redhat Enterprise Linux Eus Compute Node	Version 7.6
Redhat Enterprise Linux Eus Compute Node	Version 7.7
Redhat Enterprise Linux For Ibm Z Systems	Version 7.0_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.4_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.5_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.6_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.7_s390x
Redhat Enterprise Linux For Power Big Endian	Version 7.0_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.4_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.5_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.6_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.7_ppc64
Redhat Enterprise Linux For Power Little Endian	Version 7.0_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.4_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.5_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.6_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.7_ppc64le
Redhat Enterprise Linux For Scientific Computing	Version 7.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 7.4_ppc64le
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 7.6_ppc64le
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 7.7_ppc64le
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 9.2_ppc64le
Redhat Enterprise Linux Server Tus	Version 7.4
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.4
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.6
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.7
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Jboss Enterprise Web Server	Version 2.0.0
Redhat Jboss Enterprise Web Server	Version 3.0.0
Redhat Jboss Enterprise Web Server Text Only Advisories	All versions

Related CWEs

CWE-434

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (39)

http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.html

Source: security@apache.org

Exploit

http://www.securityfocus.com/bid/100901

Source: security@apache.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039392

Source: security@apache.org

Broken LinkThird Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:3080

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3081

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3113

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:3114

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:0465

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:0466

Source: security@apache.org

Third Party Advisory

https://github.com/breaktoprotect/CVE-2017-12615

Source: security@apache.org

ExploitThird Party Advisory

https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

Mailing ListPatch

https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

Mailing ListPatch

https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

Mailing ListPatch

https://lists.apache.org/thread.html/8fcb1e2d5895413abcf266f011b9918ae03e0b7daceb118ffbf23f8c%40%3Cannounce.tomcat.apache.org%3E

Source: security@apache.org

Issue TrackingMailing List

https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E

Source: security@apache.org

Mailing List

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

Mailing ListPatch

https://security.netapp.com/advisory/ntap-20171018-0001/

Source: security@apache.org

Third Party Advisory

https://www.exploit-db.com/exploits/42953/

Source: security@apache.org

Third Party AdvisoryVDB Entry

https://www.synology.com/support/security/Synology_SA_17_54_Tomcat

Source: security@apache.org

Third Party Advisory

http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.html