Apache Tomcat HTTP PUT Remote Code Execution (CVE-2017-12617)

A remote code execution vulnerability exists in Apache Tomcat. The vulnerability is due to insufficient validation of PUT requests. A remote attacker can exploit this vulnerability by sending a specially crafted request containing a JSP page to the vulnerable server.

from Check Point Update Services Advisories http://ift.tt/2zRrxKq

No comments:

Post a Comment

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads...