VulnSocial

CVE-2017-12617(apache / active_iq_unified_manager)

LOWCVSS 8.1 · HIGHCISA KEV

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

apache CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-04-15. Apply updates per vendor instructions.

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-434

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • active_iq_unified_manager
  • agile_product_lifecycle_management
  • communications_instant_messaging_server
  • debian_linux

Affected systems

Vendors
apachecanonicaldebiannetapporacleredhat
Products
active_iq_unified_manageragile_product_lifecycle_managementcommunications_instant_messaging_serverdebian_linuxelementendeca_information_discovery_integratorenterprise_linux_desktopenterprise_linux_eusenterprise_linux_eus_compute_nodeenterprise_linux_for_ibm_z_systems

96 versions affected across 58 products

Deep dive

Full discourse2 posts
  • ♫NØX♥H♪@_Why_Noot

    NØX Echo Lineage Signal: CVE-2017-12617 Entity: Tomcat Lineage: Public vulnerability → Public exploit/PoC → Observed exploitation Relationship: - Tomcat → CVE-2017-12617 → Evidence → Operational Risk Current State: DISCLOSED, POC_AVAILABLE, ACTIVE_EXPLOITATION

    1000023
    9 followersView on X
  • ♫Why♥Not♪@Python_s_

    NØØT Security Alerts Classification: Critical CVE: CVE-2017-12617 Product: Apache / Tomcat Summary: VulnCheck reports real-world exploitation activity affecting Apache / Tomcat. Evidence: Public PoC/exploit available; Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries Impact: The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 17 Apr 2019 Source: https://vulncheck.com/xdb/c42eddecf666 #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Tomcat #CVE_2017_12617 #ActiveExploitation #Exploit

    0001096
    231 followersView on X
CPE platform detail151 entries

151 of 151 entries

PartVendorProductVersionTarget SWTarget HW
Appapachetomcat---
OScanonicalubuntu_linux12.04--
OScanonicalubuntu_linux16.04--
OScanonicalubuntu_linux17.10--
OScanonicalubuntu_linux18.04--
OSdebiandebian_linux7.0--
Appnetappactive_iq_unified_manager-vmware_vsphere-
Appnetappactive_iq_unified_manager-windows-
OSnetappelement-vcenter_server-
Appnetapponcommand_balance---
Appnetapponcommand_insight---
Appnetapponcommand_shift---
Appnetapponcommand_workflow_automation---
Appnetappsnapcenter---
Apporacleagile_product_lifecycle_management9.3.3--
Apporacleagile_product_lifecycle_management9.3.4--
Apporacleagile_product_lifecycle_management9.3.5--
Apporacleagile_product_lifecycle_management9.3.6--
Apporaclecommunications_instant_messaging_server10.0.1--
Apporacleendeca_information_discovery_integrator3.1.0--
Apporacleendeca_information_discovery_integrator3.2.0--
Apporacleenterprise_manager_for_mysql_database12.1.0.4.0--
Apporaclefinancial_services_analytical_applications_infrastructure---
Apporaclefmw_platform12.2.1.2.0--
Apporaclefmw_platform12.2.1.3.0--
Apporaclehealth_sciences_empirica_inspections1.0.1.1--
Apporaclehospitality_guest_access4.2.0--
Apporaclehospitality_guest_access4.2.1--
Apporacleinstantis_enterprisetrack17.1--
Apporacleinstantis_enterprisetrack17.2--
Apporaclemanagement_pack11.2.1.0.13goldengate-
Apporaclemicros_lucas2.9.5--
Apporaclemicros_retail_xbri_loss_prevention10.0.1--
Apporaclemicros_retail_xbri_loss_prevention10.5.0--
Apporaclemicros_retail_xbri_loss_prevention10.6.0--
Apporaclemicros_retail_xbri_loss_prevention10.7.0--
Apporaclemicros_retail_xbri_loss_prevention10.8.0--
Apporaclemicros_retail_xbri_loss_prevention10.8.1--
Apporaclemysql_enterprise_monitor---
Apporacleretail_advanced_inventory_planning13.2--
Apporacleretail_advanced_inventory_planning13.4--
Apporacleretail_advanced_inventory_planning14.1--
Apporacleretail_advanced_inventory_planning15.0--
Apporacleretail_back_office14.0.4--
Apporacleretail_back_office14.1.3--
Apporacleretail_central_office14.0.4--
Apporacleretail_central_office14.1.3--
Apporacleretail_convenience_and_fuel_pos_software2.1.132--
Apporacleretail_eftlink1.1.124--
Apporacleretail_eftlink15.0.1--
Apporacleretail_eftlink16.0.2--
Apporacleretail_insights14.0--
Apporacleretail_insights14.1--
Apporacleretail_insights15.0--
Apporacleretail_insights16.0--
Apporacleretail_invoice_matching12.0--
Apporacleretail_invoice_matching13.0--
Apporacleretail_invoice_matching13.1--
Apporacleretail_invoice_matching13.2--
Apporacleretail_invoice_matching14.0--
Apporacleretail_invoice_matching14.1--
Apporacleretail_invoice_matching15.0--
Apporacleretail_invoice_matching16.0--
Apporacleretail_order_broker15.0--
Apporacleretail_order_broker16.0--
Apporacleretail_order_broker5.0--
Apporacleretail_order_broker5.1--
Apporacleretail_order_broker5.2--
Apporacleretail_order_management_system4.0--
Apporacleretail_order_management_system4.5--
Apporacleretail_order_management_system4.7--
Apporacleretail_order_management_system5.0--
Apporacleretail_point-of-service14.0.4--
Apporacleretail_point-of-service14.1.3--
Apporacleretail_price_management12.0--
Apporacleretail_price_management13.0--
Apporacleretail_price_management13.1--
Apporacleretail_price_management13.2--
Apporacleretail_price_management14.0--
Apporacleretail_price_management14.1--
Apporacleretail_price_management15.0--
Apporacleretail_price_management16.0--
Apporacleretail_returns_management14.0.4--
Apporacleretail_returns_management14.1.3--
Apporacleretail_returns_management2.3.8--
Apporacleretail_returns_management2.4.9--
Apporacleretail_store_inventory_management12.0.12--
Apporacleretail_store_inventory_management13.0.7--
Apporacleretail_store_inventory_management13.1.9--
Apporacleretail_store_inventory_management13.2.9--
Apporacleretail_store_inventory_management14.0.4--
Apporacleretail_store_inventory_management14.1.3--
Apporacleretail_store_inventory_management15.0.2--
Apporacleretail_store_inventory_management16.0.1--
Apporacleretail_xstore_point_of_service15.0.1--
Apporacleretail_xstore_point_of_service6.0.11--
Apporacleretail_xstore_point_of_service7.0.6--
Apporacleretail_xstore_point_of_service7.1.6--
Apporacletransportation_management6.3.1--
Apporacletransportation_management6.3.2--
Apporacletransportation_management6.3.3--
Apporacletransportation_management6.3.4--
Apporacletransportation_management6.3.5--
Apporacletransportation_management6.3.6--
Apporacletransportation_management6.3.7--
Apporacletuxedo_system_and_applications_monitor12.1.3.0.0--
Apporaclewebcenter_sites11.1.1.8.0--
Apporacleworkload_manager12.2.0.1--
OSredhatenterprise_linux_desktop6.0--
OSredhatenterprise_linux_desktop7.0--
OSredhatenterprise_linux_eus7.4--
OSredhatenterprise_linux_eus7.5--
OSredhatenterprise_linux_eus7.6--
OSredhatenterprise_linux_eus7.7--
OSredhatenterprise_linux_eus_compute_node7.4--
OSredhatenterprise_linux_eus_compute_node7.5--
OSredhatenterprise_linux_eus_compute_node7.6--
OSredhatenterprise_linux_eus_compute_node7.7--
OSredhatenterprise_linux_for_ibm_z_systems6.0_s390x--
OSredhatenterprise_linux_for_ibm_z_systems7.0_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus7.4_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus7.5_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus7.6_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus7.7_s390x--
OSredhatenterprise_linux_for_power_big_endian6.0_ppc64--
OSredhatenterprise_linux_for_power_big_endian7.0_ppc64--
OSredhatenterprise_linux_for_power_big_endian_eus7.4_ppc64--
OSredhatenterprise_linux_for_power_big_endian_eus7.5_ppc64--
OSredhatenterprise_linux_for_power_big_endian_eus7.6_ppc64--
OSredhatenterprise_linux_for_power_big_endian_eus7.7_ppc64--
OSredhatenterprise_linux_for_power_little_endian7.0--
OSredhatenterprise_linux_for_power_little_endian_eus7.4_ppc64le--
OSredhatenterprise_linux_for_power_little_endian_eus7.5_ppc64le--
OSredhatenterprise_linux_for_power_little_endian_eus7.6_ppc64le--
OSredhatenterprise_linux_for_power_little_endian_eus7.7_ppc64le--
OSredhatenterprise_linux_server6.0--
OSredhatenterprise_linux_server7.0--
OSredhatenterprise_linux_server_aus7.4--
OSredhatenterprise_linux_server_aus7.6--
OSredhatenterprise_linux_server_aus7.7--
OSredhatenterprise_linux_server_tus7.4--
OSredhatenterprise_linux_server_tus7.6--
OSredhatenterprise_linux_server_tus7.7--
OSredhatenterprise_linux_workstation6.0--
OSredhatenterprise_linux_workstation7.0--
Appredhatfuse1.0--
Appredhatjboss_enterprise_application_platform6.0.0--
Appredhatjboss_enterprise_application_platform6.4.0--
Appredhatjboss_enterprise_web_server2.0.0--
Appredhatjboss_enterprise_web_server3.0.0--
Appredhatjboss_enterprise_web_server_text-only_advisories---

Explore more

Back to dashboardapache CVEscanonical CVEsdebian CVEsactive_iq_unified_manager vulnerabilities