admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-31 02:31:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2017/CVE-2017-76xx/CVE-2017-7675.json

345 lines
13 KiB
JSON
Raw Normal View History

bootstrap
2023-04-24 12:24:31 +02:00
{
"id": "CVE-2017-7675",
"sourceIdentifier": "security@apache.org",
"published": "2017-08-11T02:29:00.320",
"lastModified": "2019-06-12T17:29:00.683",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
"value": "The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL."
},
{
"lang": "es",
"value": "La implementaci\u00f3n HTTP/2 en Apache Tomcat en sus versiones 9.0.0.M1 a 9.0.0.M21 y 8.5.0 a 8.5.15 elud\u00eda una serie de verificaciones de seguridad que preven\u00edan ataques de salto de directorio. Por lo tanto, era posible eludir restricciones de seguridad empleando una URL especialmente manipulada."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": true,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "69A7FC28-A0EC-4516-9776-700343D2F4DB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "18814653-6D44-47D9-A2F5-89C5AFB255F8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "D4D811A9-4988-4C11-AA27-F5BE2B93D8D4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "FAEF824D-7E95-4BC1-8DBB-787DCE595E21"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*",
"matchCriteriaId": "97F4A2B3-DB1D-4D0B-B5FF-7EE2A0D291BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0B461D5A-1208-498F-B551-46C6D514AC2B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*",
"matchCriteriaId": "598E5D91-0165-4D55-9EDD-EBB5AAAD1172"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*",
"matchCriteriaId": "4B6B61B7-09A3-41C8-8333-0417C14CC87E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*",
"matchCriteriaId": "95A139BA-CD3C-42F5-88BA-BE7BE58246D7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*",
"matchCriteriaId": "876EADA5-60AD-4849-BE10-61C75AA75053"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*",
"matchCriteriaId": "1814F8DE-2060-411F-9FCC-6EC42AF5663D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*",
"matchCriteriaId": "1AF6DBF7-BB0A-4AE6-84DA-51428ACF47CD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*",
"matchCriteriaId": "A34F72ED-04FE-4EDE-BB18-BE8B1E99EEF1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*",
"matchCriteriaId": "3245C35C-02E7-46B9-A720-37D3C17AFDD4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*",
"matchCriteriaId": "F4239A72-EFA1-49E3-8755-5961060F2198"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*",
"matchCriteriaId": "C9053CCE-1175-47F9-BF27-7586F082AF83"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m1:*:*:*:*:*:*",
"matchCriteriaId": "34EB147F-4D0B-49D5-95DB-ED36F6ECA517"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m10:*:*:*:*:*:*",
"matchCriteriaId": "E6A52BDB-1384-470D-9A45-2A5A3F6A9795"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m11:*:*:*:*:*:*",
"matchCriteriaId": "50820930-F6F0-4BDC-90A5-CC54592A7970"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m12:*:*:*:*:*:*",
"matchCriteriaId": "3A401718-6009-4BAB-AE21-D8CDC11BA28A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m13:*:*:*:*:*:*",
"matchCriteriaId": "87C93F0D-3C87-4E53-9426-4E442279A616"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m14:*:*:*:*:*:*",
"matchCriteriaId": "D386FA01-80C5-44FA-8B4D-9A4321575929"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m15:*:*:*:*:*:*",
"matchCriteriaId": "A7084406-5F98-407C-AB0C-8FB49090DB84"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m16:*:*:*:*:*:*",
"matchCriteriaId": "23D299BF-CF9D-47AC-BFE3-EB8FB6ED85A2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m17:*:*:*:*:*:*",
"matchCriteriaId": "458707DD-0813-46A2-AF43-99E51001A252"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m18:*:*:*:*:*:*",
"matchCriteriaId": "FFD72BFB-A4BF-4AA3-A116-E03682FD6A3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m19:*:*:*:*:*:*",
"matchCriteriaId": "5607C05A-3A02-4ECD-9485-3106D94C6017"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m2:*:*:*:*:*:*",
"matchCriteriaId": "E99E2479-0701-45F8-A2E3-032FBECCE704"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m20:*:*:*:*:*:*",
"matchCriteriaId": "4FF53C5D-BE39-4A82-81A9-B754FBAE8974"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m21:*:*:*:*:*:*",
"matchCriteriaId": "6F1932C7-0D7C-4D0C-A0F7-BD4E78AAC9B1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m3:*:*:*:*:*:*",
"matchCriteriaId": "01633F5D-3C81-41B0-84B5-4EF5F58C50C5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m4:*:*:*:*:*:*",
"matchCriteriaId": "0A9F84CF-504C-4265-8DB3-1F108B7C3BFE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m5:*:*:*:*:*:*",
"matchCriteriaId": "A8A9EBAD-79A9-4774-B2AA-7A45B36B5E63"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m6:*:*:*:*:*:*",
"matchCriteriaId": "B4BD6F87-A60C-40DA-BDFB-8E7A7448F37E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m7:*:*:*:*:*:*",
"matchCriteriaId": "4C828DCE-1C17-48B3-89F2-A461E00C9211"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m8:*:*:*:*:*:*",
"matchCriteriaId": "6930A67B-C0D8-4CB0-BCC8-5F8448C60651"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:apache:tomcat:9.0.0:m9:*:*:*:*:*:*",
"matchCriteriaId": "C3D53D09-BDDC-4282-B7C7-34CC82476FDE"
}
]
}
]
}
],
"references": [
{
"url": "http://www.debian.org/security/2017/dsa-3974",
"source": "security@apache.org"
},
{
"url": "http://www.securityfocus.com/bid/100256",
"source": "security@apache.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/5f8ab8a02f3610bd56ea2b0d69af25cbde451d79c46276c350e05a15@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/d3a5818e8af731bde6a05ef031ed3acc093c6dd7c4bfcc4936eafd6c@%3Cannounce.tomcat.apache.org%3E",
"source": "security@apache.org",
"tags": [
"Mailing List",
"Vendor Advisory"
]
},
{
"url": "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E",
"source": "security@apache.org"
},
{
"url": "https://security.netapp.com/advisory/ntap-20180614-0003/",
"source": "security@apache.org"
}
]
}
Reference in New Issue Copy Permalink