Megjelentek A CVE-2020-9484 vulnerability in Apache Tomcat, the open implementation of Java Servlet, JavaServer Pages, Java Expression Language, and Java WebSocket technologies. This issue allows for code execution on the server through the sending of a specially crafted request. The vulnerability has been fixed in releases Apache Tomcat 10.0.0-M5, 9.0.35, 8.5.55, and 7.0.104.
For the successful exploitation of the vulnerability, the attacker must have the ability to control the content and name of the file on szerveren (for example, if the application allows uploading documents or images). Furthermore, the attack is only possible on systems that use PersistenceManager with a FileStore store, where the sessionAttributeValueClassNameFilter parameter is set to 'null' (by default, if SecurityManager is not applied) or a weak filter that allows for object deserialization. The attacker must also know or guess the path to the file controlled by them, relative to the location of the FileStore.
Forrás: opennet.ru
