Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-12617

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Published

2017-10-04T01:29:02.120

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

6.4

Weaknesses

Type: Primary
CWE-434
Type: Secondary
CWE-434

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	apache	tomcat	< 7.0.82	Yes
Application	apache	tomcat	< 8.0.47	Yes
Application	apache	tomcat	< 8.5.23	Yes
Application	apache	tomcat	< 9.0.1	Yes
Operating System	canonical	ubuntu_linux	12.04	Yes
Operating System	canonical	ubuntu_linux	16.04	Yes
Operating System	canonical	ubuntu_linux	17.10	Yes
Operating System	canonical	ubuntu_linux	18.04	Yes
Application	oracle	agile_plm	9.3.3	Yes
Application	oracle	agile_plm	9.3.4	Yes
Application	oracle	agile_plm	9.3.5	Yes
Application	oracle	agile_plm	9.3.6	Yes
Application	oracle	communications_instant_messaging_server	10.0.1	Yes
Application	oracle	endeca_information_discovery_integrator	3.1.0	Yes
Application	oracle	endeca_information_discovery_integrator	3.2.0	Yes
Application	oracle	enterprise_manager_for_mysql_database	12.1.0.4.0	Yes
Application	oracle	financial_services_analytical_applications_infrastructure	≤ 7.3.5.3.0	Yes
Application	oracle	financial_services_analytical_applications_infrastructure	≤ 8.0.9.0.0	Yes
Application	oracle	fmw_platform	12.2.1.2.0	Yes
Application	oracle	fmw_platform	12.2.1.3.0	Yes
Application	oracle	health_sciences_empirica_inspections	1.0.1.1	Yes
Application	oracle	hospitality_guest_access	4.2.0	Yes
Application	oracle	hospitality_guest_access	4.2.1	Yes
Application	oracle	instantis_enterprisetrack	17.1	Yes
Application	oracle	instantis_enterprisetrack	17.2	Yes
Application	oracle	management_pack	11.2.1.0.13	Yes
Application	oracle	micros_lucas	2.9.5	Yes
Application	oracle	micros_retail_xbri_loss_prevention	10.0.1	Yes
Application	oracle	micros_retail_xbri_loss_prevention	10.5.0	Yes
Application	oracle	micros_retail_xbri_loss_prevention	10.6.0	Yes
Application	oracle	micros_retail_xbri_loss_prevention	10.7.0	Yes
Application	oracle	micros_retail_xbri_loss_prevention	10.8.0	Yes
Application	oracle	micros_retail_xbri_loss_prevention	10.8.1	Yes
Application	oracle	mysql_enterprise_monitor	≤ 3.3.6.3293	Yes
Application	oracle	mysql_enterprise_monitor	≤ 3.4.4.4226	Yes
Application	oracle	mysql_enterprise_monitor	≤ 4.0.0.5135	Yes
Application	oracle	retail_advanced_inventory_planning	13.2	Yes
Application	oracle	retail_advanced_inventory_planning	13.4	Yes
Application	oracle	retail_advanced_inventory_planning	14.1	Yes
Application	oracle	retail_advanced_inventory_planning	15.0	Yes
Application	oracle	retail_back_office	14.0.4	Yes
Application	oracle	retail_back_office	14.1.3	Yes
Application	oracle	retail_central_office	14.0.4	Yes
Application	oracle	retail_central_office	14.1.3	Yes
Application	oracle	retail_convenience_and_fuel_pos_software	2.1.132	Yes
Application	oracle	retail_eftlink	1.1.124	Yes
Application	oracle	retail_eftlink	15.0.1	Yes
Application	oracle	retail_eftlink	16.0.2	Yes
Application	oracle	retail_insights	14.0	Yes
Application	oracle	retail_insights	14.1	Yes
Application	oracle	retail_insights	15.0	Yes
Application	oracle	retail_insights	16.0	Yes
Application	oracle	retail_invoice_matching	12.0	Yes
Application	oracle	retail_invoice_matching	13.0	Yes
Application	oracle	retail_invoice_matching	13.1	Yes
Application	oracle	retail_invoice_matching	13.2	Yes
Application	oracle	retail_invoice_matching	14.0	Yes
Application	oracle	retail_invoice_matching	14.1	Yes
Application	oracle	retail_invoice_matching	15.0	Yes
Application	oracle	retail_invoice_matching	16.0	Yes
Application	oracle	retail_order_broker	5.0	Yes
Application	oracle	retail_order_broker	5.1	Yes
Application	oracle	retail_order_broker	5.2	Yes
Application	oracle	retail_order_broker	15.0	Yes
Application	oracle	retail_order_broker	16.0	Yes
Application	oracle	retail_order_management_system	4.0	Yes
Application	oracle	retail_order_management_system	4.5	Yes
Application	oracle	retail_order_management_system	4.7	Yes
Application	oracle	retail_order_management_system	5.0	Yes
Application	oracle	retail_point-of-service	14.0.4	Yes
Application	oracle	retail_point-of-service	14.1.3	Yes
Application	oracle	retail_price_management	12.0	Yes
Application	oracle	retail_price_management	13.0	Yes
Application	oracle	retail_price_management	13.1	Yes
Application	oracle	retail_price_management	13.2	Yes
Application	oracle	retail_price_management	14.0	Yes
Application	oracle	retail_price_management	14.1	Yes
Application	oracle	retail_price_management	15.0	Yes
Application	oracle	retail_price_management	16.0	Yes
Application	oracle	retail_returns_management	2.3.8	Yes
Application	oracle	retail_returns_management	2.4.9	Yes
Application	oracle	retail_returns_management	14.0.4	Yes
Application	oracle	retail_returns_management	14.1.3	Yes
Application	oracle	retail_store_inventory_management	12.0.12	Yes
Application	oracle	retail_store_inventory_management	13.0.7	Yes
Application	oracle	retail_store_inventory_management	13.1.9	Yes
Application	oracle	retail_store_inventory_management	13.2.9	Yes
Application	oracle	retail_store_inventory_management	14.0.4	Yes
Application	oracle	retail_store_inventory_management	14.1.3	Yes
Application	oracle	retail_store_inventory_management	15.0.2	Yes
Application	oracle	retail_store_inventory_management	16.0.1	Yes
Application	oracle	retail_xstore_point_of_service	6.0.11	Yes
Application	oracle	retail_xstore_point_of_service	7.0.6	Yes
Application	oracle	retail_xstore_point_of_service	7.1.6	Yes
Application	oracle	retail_xstore_point_of_service	15.0.1	Yes
Application	oracle	transportation_management	6.3.1	Yes
Application	oracle	transportation_management	6.3.2	Yes
Application	oracle	transportation_management	6.3.3	Yes
Application	oracle	transportation_management	6.3.4	Yes
Application	oracle	transportation_management	6.3.5	Yes
Application	oracle	transportation_management	6.3.6	Yes
Application	oracle	transportation_management	6.3.7	Yes
Application	oracle	tuxedo_system_and_applications_monitor	12.1.3.0.0	Yes
Application	oracle	webcenter_sites	11.1.1.8.0	Yes
Application	oracle	workload_manager	12.2.0.1	Yes
Operating System	debian	debian_linux	7.0	Yes
Application	netapp	active_iq_unified_manager	≥ 7.3	Yes
Application	netapp	active_iq_unified_manager	≥ 9.5	Yes
Application	netapp	oncommand_balance	-	Yes
Application	netapp	oncommand_insight	-	Yes
Application	netapp	oncommand_shift	-	Yes
Application	netapp	oncommand_workflow_automation	-	Yes
Application	netapp	snapcenter	-	Yes
Operating System	netapp	element	-	Yes
Application	redhat	fuse	1.0	Yes
Application	redhat	jboss_enterprise_application_platform	6.0.0	Yes
Application	redhat	jboss_enterprise_application_platform	6.4.0	Yes
Application	redhat	jboss_enterprise_web_server	2.0.0	Yes
Application	redhat	jboss_enterprise_web_server	3.0.0	Yes
Application	redhat	jboss_enterprise_web_server_text-only_advisories	-	Yes
Operating System	redhat	enterprise_linux_desktop	6.0	Yes
Operating System	redhat	enterprise_linux_desktop	7.0	Yes
Operating System	redhat	enterprise_linux_eus	7.4	Yes
Operating System	redhat	enterprise_linux_eus	7.5	Yes
Operating System	redhat	enterprise_linux_eus	7.6	Yes
Operating System	redhat	enterprise_linux_eus	7.7	Yes
Operating System	redhat	enterprise_linux_eus_compute_node	7.4	Yes
Operating System	redhat	enterprise_linux_eus_compute_node	7.5	Yes
Operating System	redhat	enterprise_linux_eus_compute_node	7.6	Yes
Operating System	redhat	enterprise_linux_eus_compute_node	7.7	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems	6.0_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems	7.0_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	7.4_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	7.5_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	7.6_s390x	Yes
Operating System	redhat	enterprise_linux_for_ibm_z_systems_eus	7.7_s390x	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian	6.0_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian	7.0_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.4_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.5_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.6_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.7_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian	7.0	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	7.4_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	7.5_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	7.6_ppc64le	Yes
Operating System	redhat	enterprise_linux_for_power_little_endian_eus	7.7_ppc64le	Yes
Operating System	redhat	enterprise_linux_server	6.0	Yes
Operating System	redhat	enterprise_linux_server	7.0	Yes
Operating System	redhat	enterprise_linux_server_aus	7.4	Yes
Operating System	redhat	enterprise_linux_server_aus	7.6	Yes
Operating System	redhat	enterprise_linux_server_aus	7.7	Yes
Operating System	redhat	enterprise_linux_server_tus	7.4	Yes
Operating System	redhat	enterprise_linux_server_tus	7.6	Yes
Operating System	redhat	enterprise_linux_server_tus	7.7	Yes
Operating System	redhat	enterprise_linux_workstation	6.0	Yes
Operating System	redhat	enterprise_linux_workstation	7.0	Yes

References

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html Patch, Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html Patch, Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch, Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/100954 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1039552 Third Party Advisory, VDB Entry ([email protected])
https://access.redhat.com/errata/RHSA-2017:3080 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2017:3081 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2017:3113 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2017:3114 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:0268 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:0269 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:0270 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:0271 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:0275 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:0465 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:0466 Third Party Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2018:2939 Third Party Advisory ([email protected])
https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb%40%3Cannounce.tomcat.apache.org%3E Issue Tracking, Mailing List ([email protected])
https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch ([email protected])
https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html Mailing List, Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20171018-0002/ Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20180117-0002/ Third Party Advisory ([email protected])
https://support.f5.com/csp/article/K53173544 Third Party Advisory ([email protected])
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us Third Party Advisory ([email protected])
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us Third Party Advisory ([email protected])
https://usn.ubuntu.com/3665-1/ Third Party Advisory ([email protected])
https://www.exploit-db.com/exploits/42966/ Exploit, Third Party Advisory, VDB Entry ([email protected])
https://www.exploit-db.com/exploits/43008/ Exploit, Third Party Advisory, VDB Entry ([email protected])
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch, Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/100954 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1039552 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2017:3080 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2017:3081 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2017:3113 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2017:3114 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:0268 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:0269 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:0270 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:0271 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:0275 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:0465 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:0466 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2018:2939 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb%40%3Cannounce.tomcat.apache.org%3E Issue Tracking, Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20171018-0002/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20180117-0002/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.f5.com/csp/article/K53173544 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/3665-1/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/42966/ Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/43008/ Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)