Apache Tomcat XSS vulnerability in Manager

2007.06.22
Credit: Mark Thomas
Risk: Low
Local: No
Remote: Yes
CWE: CWE-79


CVSS Base Score: 3.5/10
Impact Subscore: 2.9/10
Exploitability Subscore: 6.8/10
Exploit range: Remote
Attack complexity: Medium
Authentication: Single time
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-2450: Apache Tomcat XSS vulnerabilities in Manager Severity: low (cross-site scripting) Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.24 Tomcat 6.0.0 to 6.0.13 Description: The Manager and Host Manager web applications do not escape some user provided data before including it in the output. This enables a XSS attack. The user must be logged in to the Manager or Host Manager web application. Mitigation: 1. Log out of the Manager or Host Manager application (close the browser) once tasks requiring use of the manager have been completed. Example: <form action="http://example.com:8080/manager/html/upload" method="post" enctype="multipart/form-data"> <INPUT TYPE="hidden" NAME='deployWar";filename="<script>alert()</script>" Content-Type: image/gif' VALUE="abc"> <input type="submit"> </form> Credit: These issues were discovered by Daiki Fukumori, Secure Sky Technology. References: http://tomcat.apache.org/security.html Mark Thomas -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGcKdkb7IeiTPGAkMRAt1IAKCR47H3juKSvEdGwymOMCpKZdXi8wCgvrzl aQy4/FihDqtrwRDLl0f/asA= =RGcQ -----END PGP SIGNATURE-----


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2019, cxsecurity.com

 

Back to Top