CVE-2018-1304

Aliases:GHSA-6rxj-58jh-436r
Advisory lineage Upstream: 0 Downstream: 17
Modified
Published: 28 Feb 2018, 20:00
Last modified:17 Sept 2024, 01:35

Vulnerability Summary

Overall Risk (default)
low
24/100
CVSS Score
5.9 MEDIUM
v3.0 (nvd)
EPSS Score
3.04% LOW
3% probability +1.25%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Feb 2018, 20:00
Published
Vulnerability first disclosed
17 Sept 2024, 01:35
Last Modified
Vulnerability information updated

Description

The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected.

CVSS Metrics

  • v3.0•MEDIUM•Score: 5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
  • v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 3.04%• Percentile: 87%

Affected Systems

  • apache software foundation•apache tomcat

    Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49, 7.0.0 to 7.0.84

  • Unknown•Tomcat

    ≥ 7.0.0, ≤ 7.0.84 | ≥ 8.0.0, ≤ 8.0.49 | ≥ 8.5.0, ≤ 8.5.27 | ≥ 9.0.0, ≤ 9.0.4 | 8.0.0:rc1 | 9.0.0:milestone1 | 9.0.0:milestone10 | 9.0.0:milestone11 | 9.0.0:milestone12 | 9.0.0:milestone13 | 9.0.0:milestone14 | 9.0.0:milestone15 | 9.0.0:milestone16 | 9.0.0:milestone17 | 9.0.0:milestone18 | 9.0.0:milestone19 | 9.0.0:milestone2 | 9.0.0:milestone20 | 9.0.0:milestone21 | 9.0.0:milestone22 | 9.0.0:milestone23 | 9.0.0:milestone24 | 9.0.0:milestone25 | 9.0.0:milestone26 | 9.0.0:milestone27 | 9.0.0:milestone3 | 9.0.0:milestone4 | 9.0.0:milestone5 | 9.0.0:milestone6 | 9.0.0:milestone7 | 9.0.0:milestone8 | 9.0.0:milestone9

  • canonical•ubuntu_linux

    14.04 | 16.04 | 17.10 | 18.04

  • debian•debian_linux

    7.0 | 8.0 | 9.0

  • org.apache.tomcat.embed•tomcat-embed-core

    ≥ 9.0.0, < 9.0.5 | ≥ 8.5.0, < 8.5.28 | ≥ 8.0.0, < 8.0.51 | ≥ 7.0.0, < 7.0.86

  • Unknown•Fusion Middleware

    12.2.1.3.0

  • oracle•hospitality_guest_access

    4.2.0 | 4.2.1

  • oracle•micros_relate_crm_software

    11.4

  • oracle•secure_global_desktop

    5.3 | 5.4

  • redhat•jboss_enterprise_application_platform

    6 | 6.4

  • redhat•jboss_enterprise_web_server

    3.0.0

  • redhat•jboss_middleware

    1

References (68)