Publicerade Information about the vulnerability (CVE-2020-9484) in Apache Tomcat, an open implementation of Java Servlet technologies, JavaServer Pages, Java Expression Language, and Java WebSocket. The issue allows for remote code execution on the server through a specially crafted request. The vulnerability has been fixed in releases Apache Tomcat 10.0.0-M5, 9.0.35, 8.5.55, and 7.0.104.
To successfully exploit the vulnerability, the attacker must have control over the content and name of the file on servern (for instance, when the application has the ability to upload documents or images). Additionally, the attack is only possible on systems that use PersistenceManager with a FileStore, where the sessionAttributeValueClassNameFilter parameter is set to 'null' (by default, unless a SecurityManager is applied) or a weak filter allowing object deserialization is chosen. The attacker must also know or guess the path to the file they control in relation to the FileStore location.
KĂ€lla: opennet.ru
