Apache Tomcat VirtualDirContext Class File Handling Remote JSP Source Code Disclosure

🗓️ 09 Mar 2018 00:00:00Reported by Dsquare SecurityType

dsquare👁 678 Views

Apache Tomcat VirtualDirContext Class File Handling Vulnerabilit

Reporter	Title	Published	Views	Family All 80
Gitee	Exploit for Improper Input Validation in Apple Mac_Os_X	18 Nov 201916:59	–	gitee
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Reporting Service shipped with Rational Insight (CVE-2017-12615, CVE-2017-12616, CVE-2017-12617)	17 Jun 201805:23	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat affect multiple IBM Rational products based on IBM's Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Build Forge Security Advisory for Apache HTTPD, Apache Tomcat and OpenSSL Upgrade	17 Jun 201805:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Tomcat vulnerabilities	6 Aug 201814:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache Tomcat vulnerabilities.	15 Jun 201823:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Reporting Service shipped with Rational Reporting for Development Intelligence (CVE-2017-12615, CVE-2017-12616, CVE-2017-12617)	17 Jun 201805:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2017-12615, CVE-2017-12616, CVE-2017-12617)	17 Jun 201805:23	–	ibm
RedHat Linux	CVE-2017-12616	9 Mar 201812:19	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 2 security update	7 Mar 201815:09	–	redhat

For the exploit source code contact DSquare Security sales team.

09 Mar 2018 00:00Current

6.1Medium risk

Vulners AI Score6.1

EPSS0.90641