CVEvulnerability

CVE-2018-11784

4.3 MEDIUM Published 2018-10-04 Modified 2026-10-15 Official page ↗
Status
Modified
Published
2018-10-04
Last modified
2026-10-15
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-601

Description

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.

Affected configurations

• apache tomcat (>= 7.0.23 <= 7.0.90) • apache tomcat (>= 8.5.0 <= 8.5.33) • apache tomcat (>= 9.0.1 <= 9.0.11) • apache tomcat 9.0.0 • debian debian linux 8.0 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • netapp snap creator framework • redhat enterprise linux desktop 7.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server 7.6 • redhat enterprise linux server aus 7.6 • redhat enterprise linux server eus 7.6 • redhat enterprise linux server tus 7.6 • redhat enterprise linux workstation 7.0 • oracle communications application session controller 3.7.1 • oracle communications application session controller 3.8.0 • oracle hospitality guest access 4.2.0 • oracle hospitality guest access 4.2.1 • oracle instantis enterprisetrack 17.1 • oracle instantis enterprisetrack 17.2 • oracle instantis enterprisetrack 17.3 • oracle retail order broker 5.1 • oracle retail order broker 5.2 • oracle retail order broker 15.0 • oracle secure global desktop 5.4

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References