EXPOSURES › CVE-2017-12615

CVE-2017-12615

CRITICAL ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-03-25 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-12615 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 95/100 ransomwarerceexploited-in-wild

Apache Tomcat on Windows allowed arbitrary code execution via uploaded JSP files when HTTP PUT was enabled.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

apache · vendor Tomcat · product

DESCRIPTION

When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.