The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3081 advisory.

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

    Security Fix(es):

    * A vulnerability was discovered in Tomcat's handling of pipelined requests when Sendfile was used. If     sendfile processing completed quickly, it was possible for the Processor to be added to the processor     cache twice. This could lead to invalid responses or information disclosure. (CVE-2017-5647)

    * Two vulnerabilities were discovered in Tomcat where if a servlet context was configured with     readonly=false and HTTP PUT requests were allowed, an attacker could upload a JSP file to that context and     achieve code execution. (CVE-2017-12615, CVE-2017-12617)

    * A vulnerability was discovered in Tomcat where the CORS Filter did not send a Vary: Origin HTTP     header. This potentially allowed sensitive data to be leaked to other visitors through both client-side     and server-side caches. (CVE-2017-7674)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : tomcat (RHSA-2017:3081)

high Nessus Plugin ID 104251

Version 3.21

Version 3.20

Version 3.19

Version 3.18

Version 3.21 Nov 5, 2024, 12:50 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411051250
Version 3.20 Apr 28, 2024, 3:17 AM Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404280317
Version 3.19 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 3.18 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653