CVE-2018-11784

Impact:
Moderate
Public Date:
2018-10-03
CWE:
CWE-99
Bugzilla:
1636512: CVE-2018-11784 tomcat: Open redirect in default servlet

The MITRE CVE dictionary describes this issue as:

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.

Find out more about CVE-2018-11784 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v3 metrics

CVSS3 Base Score 5.3
CVSS3 Base Metrics CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Impact Low
Availability Impact None

Red Hat Security Errata

Platform Errata Release Date
Red Hat JBoss Web Server 3.1 for RHEL 7 (tomcat7) RHSA-2019:0131 2019-01-22
Red Hat Enterprise Linux 7 (tomcat) RHSA-2019:0485 2019-03-13
Red Hat JBoss Web Server 5.0 RHSA-2018:2867 2018-10-03
Red Hat Enterprise Linux 8 (pki-deps:10.6) RHSA-2019:1529 2019-06-18
Red Hat JBoss Web Server 3.1 for RHEL 6 (tomcat7) RHSA-2019:0131 2019-01-22
Red Hat JBoss Web Server 5.0 on RHEL 6 (jws5-tomcat) RHSA-2018:2868 2018-10-03
Red Hat JBoss Web Server 5.0 on RHEL 7 (jws5-tomcat) RHSA-2018:2868 2018-10-03
Red Hat JBoss Web Server 3.1 RHSA-2019:0130 2019-01-22

Affected Packages State

Platform Package State
Red Hat Software Collections for Red Hat Enterprise Linux rh-java-common-tomcat Not affected
Red Hat OpenShift Application Runtimes 1.0 springboot Affected
Red Hat JBoss Operations Network 3 jbossweb Will not fix
Red Hat JBoss Fuse Service Works 6 jbossweb Out of support scope
Red Hat JBoss Fuse 7 tomcat Under investigation
Red Hat JBoss Fuse 6 tomcat Out of support scope
Red Hat JBoss Enterprise SOA Platform 5 jbossweb Not affected
Red Hat JBoss EWS 2 tomcat7 Will not fix
Red Hat JBoss EWS 2 tomcat6 Not affected
Red Hat JBoss EAP 6 jbossweb Will not fix
Red Hat JBoss EAP 5 jbossweb Not affected
Red Hat JBoss Data Virtualization 6 jbossweb Out of support scope
Red Hat JBoss Data Grid 7 tomcat Under investigation
Red Hat JBoss Data Grid 6 jbossweb Out of support scope
Red Hat JBoss BRMS 6 tomcat Not affected
Red Hat JBoss BRMS 5 jbossweb Not affected
Red Hat JBoss BPMS 6 tomcat Not affected
Red Hat Enterprise Linux 6 tomcat6 Not affected
Unless explicitly stated as not affected, all previous versions of packages in any minor update stream of a product listed here should be assumed vulnerable, although may not have been subject to full analysis.

External References

Last Modified

CVE description copyright © 2017, The MITRE Corporation