Improper Authorization in Undertoe

🗓️ 24 May 2022 17:16:46Reported by GitHub Advisory DatabaseType

Improper Authorization in Undertow version 2.0.29.Final and before, allows remote attacker to read and upload files, fixed in 2.0.30.Fina

Reporter	Title	Published	Views	Family All 82
Tenable Nessus	Apache Tomcat AJP Connector Request Injection (Ghostcat)	24 Mar 202000:00	–	nessus
Tenable Nessus	JFrog < 7.9.0 File Inclusion Vulnerability	12 Mar 202100:00	–	nessus
Tenable Nessus	Photon OS 3.0: Apache PHSA-2020-3.0-0069	24 Mar 202000:00	–	nessus
Tenable Nessus	RHEL 6 / 7 / 8 : Red Hat JBoss Enterprise Application Platform 7.2 (RHSA-2020:0813)	16 Mar 202000:00	–	nessus
Tenable Nessus	RHEL 6 / 7 / 8 : Red Hat JBoss Enterprise Application Platform 7.3 (RHSA-2020:0962)	24 Mar 202000:00	–	nessus
Tenable Nessus	RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 6 (RHSA-2020:2058)	12 May 202000:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 7 (RHSA-2020:2059)	12 May 202000:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 8 (RHSA-2020:2060)	12 May 202000:00	–	nessus
Tenable Nessus	RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.3.1 Security update (Important) (RHSA-2020:2511)	11 Jun 202000:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.1 Security update (Important) (RHSA-2020:2512)	11 Jun 202000:00	–	nessus

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-1745
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
meterpreter	www.meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/
cnvd	www.cnvd.org.cn/webinfo/show/5415
tenable	www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487
github	www.github.com/advisories/GHSA-gv2w-88hx-8m9r

27 Jan 2023 05:02Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.18.6 - 9.8

EPSS0.04837