{"id":72053,"date":"2020-03-01T08:42:47","date_gmt":"2020-03-01T05:42:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-apache-tomcat-pozvolyayushhaya-podstavit-jsp-kod-i-poluchit-fajly-web-prilozhenij"},"modified":"2020-03-03T16:10:21","modified_gmt":"2020-03-03T13:10:21","slug":"uyazvimost-v-apache-tomcat-pozvolyayushhaya-podstavit-jsp-kod-i-poluchit-fajly-web-prilozhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-apache-tomcat-pozvolyayushhaya-podstavit-jsp-kod-i-poluchit-fajly-web-prilozhenij","title":{"rendered":"Vulnerabilitet n\u00eb Apache Tomcat q\u00eb lejon inxhinierimin e kodit JSP dhe qasje n\u00eb skedar\u00ebt e aplikacioneve web.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hulumtuesit nga kompania kineze Chaitin Tech zbuluan vulnerabiliteti<\/a><\/noindex> (CVE-2020-1938<\/a><\/noindex>) n\u00eb Apache Tomcat<\/a><\/noindex>, nj\u00eb zbatim t\u00eb hapur t\u00eb teknologjive Java Servlet, JavaServer Pages, Java Expression Language dhe Java WebSocket. Vulnerabilitetit i \u00ebsht\u00eb dh\u00ebn\u00eb emri kodik Ghostcat dhe niveli kritik i rrezikut (9.8 CVSS). Problemi lejon q\u00eb n\u00eb konfigurimin e paracaktuar t\u00eb lexohen p\u00ebrmbajtjet e \u00e7do skedari nga katalogu i aplikacionit web p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb k\u00ebrkese n\u00eb portin rrjetor 8009, p\u00ebrfshir\u00eb skedar\u00ebt me konfigurimet dhe kodet burimore t\u00eb aplikacionit.<\/p>\n

Vulnerabiliteti gjithashtu ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb importuar skedar\u00eb t\u00eb tjer\u00eb n\u00eb kodin e aplikacionit, duke lejuar ekzekutimin e kodit n\u00eb server n\u00ebse aplikacioni lejon ngarkimin e skedar\u00ebve n\u00eb server (p.sh., sulmuesi mund t\u00eb ngarkoj\u00eb nj\u00eb skenar JSP si nj\u00eb imazh p\u00ebrmes nj\u00eb forme ngarkimi). Sulmi mund t\u00eb kryhet n\u00eb rast se \u00ebsht\u00eb e mundur t\u00eb d\u00ebrgohet nj\u00eb k\u00ebrkes\u00eb n\u00eb portin rrjetor me nj\u00eb p\u00ebrpunues AJP. Sipas t\u00eb dh\u00ebnave paraprake, n\u00eb rrjet u gjet\u00ebn<\/a><\/noindex> m\u00eb shum\u00eb se 1.2 milion host-e q\u00eb pranojn\u00eb k\u00ebrkesa p\u00ebrmes protokollit AJP. <\/p>\n

Vulnerabiliteti \u00ebsht\u00eb i pranish\u00ebm n\u00eb protokollin AJP, dhe nuk shkaktohet<\/a><\/noindex> n\u00eb nj\u00eb gabim n\u00eb zbatim. P\u00ebrve\u00e7 pranimit t\u00eb lidhjeve p\u00ebrmes HTTP (porti 8080), n\u00eb Apache Tomcat, sipas paracaktimit, lejohet qasja n\u00eb aplikacionin web p\u00ebrmes protokollit AJP (Apache Jserv Protocol<\/a><\/noindex>, porti 8009), i cili \u00ebsht\u00eb nj\u00eb analog binar optimizuar p\u00ebr arritjen e performanc\u00ebs m\u00eb t\u00eb lart\u00eb t\u00eb HTTP, zakonisht i p\u00ebrdorur kur krijohet nj\u00eb grup i server\u00ebve Tomcat ose p\u00ebr t\u00eb p\u00ebrshpejtuar nd\u00ebrveprimin me Tomcat n\u00eb nj\u00eb proxy t\u00eb nd\u00ebrprer\u00eb ose n\u00eb nj\u00eb balancues ngarkese.<\/p>\n

AJP ofron nj\u00eb funksion standard p\u00ebr qasjen n\u00eb skedar\u00ebt n\u00eb server, t\u00eb cilin mund ta p\u00ebrdorni, p\u00ebrfshir\u00eb qasjen n\u00eb skedar\u00eb q\u00eb nuk duhet t\u00eb zbulohen. Supozohet se qasja n\u00eb AJP \u00ebsht\u00eb e hapur vet\u00ebm p\u00ebr server\u00ebt e besuesh\u00ebm, por n\u00eb t\u00eb v\u00ebrtet\u00eb n\u00eb konfigurimin parazgjedhor, Tomcat filloi p\u00ebrpunuesin n\u00eb t\u00eb gjitha nd\u00ebrfaqet rrjetore, dhe k\u00ebrkesat priteshin pa autentifikim. Qasja \u00ebsht\u00eb e mundur n\u00eb \u00e7do skedar t\u00eb aplikacionit web, p\u00ebrfshir\u00eb p\u00ebrmbajtjen e WEB-INF, META-INF, dhe \u00e7do katalog tjet\u00ebr q\u00eb kthehet p\u00ebrmes thirrjes ServletContext.getResourceAsStream(). AJP gjithashtu lejon p\u00ebrdorimin e \u00e7do skedari n\u00eb katalog\u00ebt e disponuesh\u00ebm p\u00ebr aplikacionin web si nj\u00eb skenar JSP.<\/p>\n

Problemi shfaqet q\u00eb nga l\u00ebshimi i deg\u00ebs s\u00eb Tomcat 6.x, e cila \u00ebsht\u00eb l\u00ebshuar 13 vjet m\u00eb par\u00eb. P\u00ebrve\u00e7 Tomcat vet\u00eb, problemi dhe<\/a><\/noindex> p\u00ebrfshin produkte q\u00eb e p\u00ebrdorin at\u00eb, si Red Hat JBoss Web Server (JWS), JBoss Enterprise Application Platform (EAP), si dhe aplikacionet web t\u00eb pavarura q\u00eb p\u00ebrdorin Spring Boot<\/a><\/noindex>. Nj\u00eb vulnerabilitet i ngjash\u00ebm (CVE-2020-1745) \u00ebsht\u00eb prezent<\/a><\/noindex> n\u00eb serverin web Undertow<\/a><\/noindex>, i p\u00ebrdorur n\u00eb serverin e aplikacioneve Wildfly. N\u00eb JBoss dhe Wildfly, protokolli AJP \u00ebsht\u00eb parazgjedhur vet\u00ebm i aktivizuar n\u00eb standalone-full-ha.xml, standalone-ha.xml dhe ha\/full-ha profile n\u00eb domain.xml. N\u00eb Spring Boot, mb\u00ebshtetja AJP \u00ebsht\u00eb e \u00e7aktivizuar parazgjedhsh\u00ebm. Aktualisht, grupet e ndryshme kan\u00eb p\u00ebrgatitur m\u00eb shum\u00eb se nj\u00eb duzin\u00eb shembuj funksional\u00eb t\u00eb eksploit\u00ebve (
\n 1<\/a><\/noindex>,
\n 2<\/a><\/noindex>,
\n 3<\/a><\/noindex>,
\n 4<\/a><\/noindex>,
\n 5<\/a><\/noindex>,
\n 6<\/a><\/noindex>,
\n 7<\/a><\/noindex>,
\n 8<\/a><\/noindex>,
\n 9<\/a><\/noindex>,
\n 10<\/a><\/noindex>,
\n 11<\/a><\/noindex>). <\/p>\n

Vulnerabiliteti \u00ebsht\u00eb eliminuar n\u00eb versionet e Tomcat 9.0.31<\/a><\/noindex>, 8.5.51<\/a><\/noindex> dhe 7.0.100<\/a><\/noindex> (mb\u00ebshtetje p\u00ebr deg\u00ebn 6.x ndaluar<\/a><\/noindex>). P\u00ebr t\u00eb ndjekur shfaqjen e p\u00ebrdit\u00ebsimeve n\u00eb shp\u00ebrndarjet mund t\u00eb vizitoni k\u00ebto faqe: Debian<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, RHEL<\/a><\/noindex>, Fedora<\/a><\/noindex>, SUSE<\/a><\/noindex>, FreeBSD<\/a><\/noindex>Si nj\u00eb mas\u00eb mbrojt\u00ebse, mund t\u00eb \u00e7aktivizoni sh\u00ebrbimin Tomcat AJP Connector (t\u00eb lidhni soketin d\u00ebgjues me localhost ose t\u00eb komentoni rreshtin me Connector port = \"8009\"), n\u00ebse nuk ka nevoj\u00eb p\u00ebr t\u00eb, ose konfigurohet<\/a><\/noindex> akses t\u00eb autentikuar duke p\u00ebrdorur atributet \"secret\" dhe \"address\", n\u00ebse sh\u00ebrbimi p\u00ebrdoret p\u00ebr nd\u00ebrveprim me servera t\u00eb tjer\u00eb dhe prokse n\u00eb baz\u00eb t\u00eb mod_jk dhe mod_proxy_ajp (mod_cluster nuk mb\u00ebshtet autentikimin). <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Chaitin Tech \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-1938) \u0432 Apache Tomcat, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 Java Servlet, JavaServer Pages, Java Expression Language \u0438 Java WebSocket. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Ghostcat \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 CVSS). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043f\u043e\u0440\u0442\u0443 8009 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u044e\u0431\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-72053","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti n\u00eb Apache Tomcat q\u00eb lejon futjen e kodit JSP dhe marrjen e skedar\u00ebve t\u00eb aplikacioneve web | ProHoster","description":"K\u00ebrkuesit nga kompania kineze Chaitin Tech zbuluan nj\u00eb vulnerabilitet (","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-apache-tomcat-pozvolyayushhaya-podstavit-jsp-kod-i-poluchit-fajly-web-prilozhenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Tomcat, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c JSP-\u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b web-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Chaitin Tech \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-apache-tomcat-pozvolyayushhaya-podstavit-jsp-kod-i-poluchit-fajly-web-prilozhenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T05:42:47+00:00","article:modified_time":"2020-03-03T13:10:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72053","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-10-08 06:25:27","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=72053"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72053\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=72053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=72053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=72053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}