MiracleLinux 7 : tomcat-7.0.69-12.el7 (AXSA:2017-1748:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1748:02 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Ja...

Linux Distros Unpatched Vulnerability : CVE-2017-5648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to...

Apache Tomcat 8.5.0 < 8.5.12

The version of Tomcat installed on the remote host is prior to 8.5.12. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat8.5.12security-8 advisory. - While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M...

Apache Tomcat 9.0.0.M1 < 9.0.0.M18

The version of Tomcat installed on the remote host is prior to 9.0.0.M18. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.0.m18security-9 advisory. - While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat...

Apache Tomcat 8.0.0.RC1 < 8.0.42

The version of Tomcat installed on the remote host is prior to 8.0.42. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat8.0.42security-8 advisory. - While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M...

K41385746: Apache Tomcat vulnerability CVE-2017-5648

Security Advisory Description While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +197 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +197 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

com.cloudera.oryx:oryx-lambda-serving (2.3.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +53 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =1.0.0, =1.0.4, =1.8.2, =2.1, =1.9.5, =1.2.0, =0.5.0, =0.0.3, =0.0.5 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), au.com.cybernostics:theme-tree (0.9.0) +970 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.12)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =1.0.0, =1, =1, =1, =1, =1, =0.1.0, =1.0.0-rc, =0.2.1, =0.1.1, =0.1.1, =0.0.26, =0.9.6 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

com.amazonaws:aws-dynamodb-session-tomcat (2.0.4), com.att.nsa:msgrtr (0.0.5) +80 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=8.0.1, <=8.0.41)

org.apache.tomcat:tomcat-catalina MAVEN version =8.0.1, =2.2.0, =0.9.1-beta3, =0.9.1-beta3, =1.7, =1.8.2, =2.1, =1.2, =16, =16, =16.3.0 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), au.com.cybernostics:theme-tree (0.9.0) +970 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.12)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =1.0.0, =1, =1, =1, =1, =1, =0.1.0, =1.0.0-rc, =0.2.1, =0.1.1, =0.1.1, =0.0.26, =0.9.6 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

au.com.mountain-pass:hyperstate (>=1, <=9), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +1015 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.0.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1, =0.0.6, =0.0.10, =2.0, =0.0.21, =0.0.21, =0.0.21, =0.0.25, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =1.1, =1.1.2 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

com.github.dblock.waffle:waffle-tomcat9 (1.8.1), com.github.waffle:waffle-tomcat9 (>=1.8.2, <=1.8.3) +13 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.0.m17)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.8.2, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m17 Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.27) +277 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.75)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 - com.definesys.mpaas:query-weblogic 1.0.0 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

au.com.mountain-pass:hyperstate (>=1, <=9), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +1015 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.0.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1, =0.0.6, =0.0.10, =2.0, =0.0.21, =0.0.21, =0.0.21, =0.0.25, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =1.1, =1.1.2 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

com.cloudera.oryx:oryx-lambda-serving (2.3.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +53 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =1.0.0, =1.0.4, =1.8.2, =2.1, =1.9.5, =1.2.0, =0.5.0, =0.0.3, =0.0.5 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

com.github.dblock.waffle:waffle-tomcat9 (1.8.1), com.github.waffle:waffle-tomcat9 (>=1.8.2, <=1.8.3) +13 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.0.m17)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.8.2, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m17 Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.27) +277 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.75)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 - com.definesys.mpaas:query-weblogic 1.0.0 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

com.aol.microservices:micro-tomcat (>=0.83, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.91.11) +9 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.0.m17)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =0.83, =0.83, =0.1.0, =1.0.0, =1.0.0, =1.6-beta.2, =0.9.4, =9.0.0.m1, =9.0.0.m1, =9.0.0.m17 Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...