Critical Photon OS Security Update - PHSA-2020-0069

Updates of 'consul', 'apache-tomcat', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

This Week in Security News: Operation Overtrap Targets Japanese Online Banking Users and Everything You Need to Know About Tax Scams

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about the number of ways Operation Overtrap can infect or trap victims with its payload. Also, read about how to protect your personal...

The vulnerability of the printenv command on Apache Tomcat servers allows a hacker to perform a cross-site scripting attack.

The vulnerability of the printenv command on Apache Tomcat servers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Detect Apache Tomcat AJP File Inclusion Vulnerability (CVE-2020-1938) using Qualys WAS

As previously reported, a severe vulnerability exists in Apache Tomcat’s Apache JServ Protocol. The Chinese cyber security company Chaitin Tech discovered the vulnerability, named “Ghostcat”, which is tracked using CVE-2020-1938 and rated critical severity with a CVSS v3 score of 9.8. This blog...

Updated tomcat packages fix security vulnerabilities

The updated packages fix security vulnerabilities: The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility ...

Important: tomcat

Issue Overview: The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88. CVE-2018-8034 The URL pattern of "" the empty string which...

Critical Photon OS Security Update - PHSA-2020-0218

Updates of 'apache-tomcat' packages of Photon OS have been released...

Important: tomcat7

Issue Overview: In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located...

Automatically Discover, Prioritize and Remediate Apache Tomcat AJP File Inclusion Vulnerability (CVE-2020-1938) using Qualys VMDR

A severe vulnerability exists in Apache Tomcat’s Apache JServ Protocol. The Chinese cyber security company Chaitin Tech discovered the vulnerability, which is named "Ghostcat" and is tracked using CVE-2020-1938. The security issue has received a critical severity rating score of 9.8 based on CVSS...

GhostCat: New High-Risk Vulnerability Affects Servers Running Apache Tomcat

If your web server is running on Apache Tomcat, you should immediately install the latest available version of the server application to prevent hackers from taking unauthorized control over it. Yes, that's possible because all versions 9.x/8.x/7.x/6.x of the Apache Tomcat released in the past 13...

Potential HTTP request smuggling in Apache Tomcat

The refactoring present in Apache Tomcat versions 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was...

Potential HTTP request smuggling in Apache Tomcat

In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse...

Apache Tomcat 8.5.x < 8.5.50 Session Fixation

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 or 7.0.0 to 7.0.98. It is, therefore, affected by a session fixation vulnerability when using FORM authentication. Note that the scanner has not attempted to exploit these issues but has instead relie...

Apache Tomcat 7.0.x < 7.0.99 Session Fixation

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 or 7.0.0 to 7.0.98. It is, therefore, affected by a session fixation vulnerability when using FORM authentication. Note that the scanner has not attempted to exploit these issues but has instead relie...

Apache Tomcat 8.5.x < 8.5.49 Local Privilege Escalation

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.48 or 7.0.0 to 7.0.98. It is, therefore, affected by a local privilege escalation vulnerability due to the JMX Remote Lifecycle Listener. Note that the scanner has not attempted to exploit these issues b...

Apache Tomcat 8.5.x < 8.5.51 Multiple Vulnerabilities

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 or 7.0.0 to 7.0.99. It is, therefore, affected by multiple vulnerabilities : - An arbitrary file read vulnerability in AJP protocol due to an implementation defect which could also be leveraged to...

Apache Tomcat 9.0.0.M1 < 9.0.29 Local Privilege Escalation

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.48 or 7.0.0 to 7.0.98. It is, therefore, affected by a local privilege escalation vulnerability due to the JMX Remote Lifecycle Listener. Note that the scanner has not attempted to exploit these issues b...

Apache Tomcat 7.0.x < 7.0.99 Local Privilege Escalation

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.48 or 7.0.0 to 7.0.98. It is, therefore, affected by a local privilege escalation vulnerability due to the JMX Remote Lifecycle Listener. Note that the scanner has not attempted to exploit these issues b...

Apache Tomcat 9.0.0.M1 < 9.0.30 Session Fixation

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 or 7.0.0 to 7.0.98. It is, therefore, affected by a session fixation vulnerability when using FORM authentication. Note that the scanner has not attempted to exploit these issues but has instead relie...

Apache Tomcat 9.0.0.M1 < 9.0.31 Multiple Vulnerabilities

The version of Apache Tomcat installed on the remote host is 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 or 7.0.0 to 7.0.99. It is, therefore, affected by multiple vulnerabilities : - An arbitrary file read vulnerability in AJP protocol due to an implementation defect which could also be leveraged to...