Description
When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Apache Software Foundation Apache Tomcat
7.0.0 to 7.0.80affected
References
- http://www.securitytracker.com/id/1039393 ↗
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us ↗
- https://www.synology.com/support/security/Synology_SA_17_54_Tomcat ↗
- https://access.redhat.com/errata/RHSA-2018:0465 ↗
- https://usn.ubuntu.com/3665-1/ ↗
- http://www.securityfocus.com/bid/100897 ↗
- https://access.redhat.com/errata/RHSA-2018:0466 ↗
- https://security.netapp.com/advisory/ntap-20171018-0001/ ↗
- https://lists.apache.org/thread.html/1df9b4552464caa42047062fe7175da0da06c18ecc8daf99258bbda6%40%3Cannounce.tomcat.apache.org%3E ↗
- https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html ↗
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E ↗
- https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E ↗
- https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E ↗
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E ↗