Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1ndjJ3LTg4aHgtOG05cs4AAkj8

Improper Authorization in Undertoe

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.

Permalink: https://github.com/advisories/GHSA-gv2w-88hx-8m9r
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ndjJ3LTg4aHgtOG05cs4AAkj8
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 2 years ago
Updated: almost 2 years ago

CVSS Score: 8.6
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS Percentage: 0.01008
EPSS Percentile: 0.83949

Identifiers: GHSA-gv2w-88hx-8m9r, CVE-2020-1745
References:

• https://nvd.nist.gov/vuln/detail/CVE-2020-1745
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1745
• https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/
• https://www.cnvd.org.cn/webinfo/show/5415
• https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487
• https://github.com/advisories/GHSA-gv2w-88hx-8m9r

Blast Radius: 32.0

Affected Packages