Apache Tomcat CVE-2018-1305 Security Bypass Vulnerability

Bugtraq ID:	103144
Class:	Unknown
CVE:	CVE-2018-1305
Remote:	Yes
Local:	No
Published:	Feb 23 2018 12:00AM
Updated:	Jul 17 2019 09:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Ubuntu Ubuntu Linux 18.04 LTS Ubuntu Ubuntu Linux 17.10 Ubuntu Ubuntu Linux 16.04 LTS Ubuntu Ubuntu Linux 14.04 LTS Redhat JBoss Web Server (JWS) 3.0 Redhat JBoss Portal Platform 6 Redhat JBoss EWS 2 Redhat Enterprise Linux 7 Oracle WebCenter Sites 11.1.1 8.0 Oracle WebCenter Sites 12.2.1.3.0 Oracle Transportation Management 6.3.7 Oracle Solaris 11.3 Oracle Siebel Applications 18.9 Oracle Siebel Applications 18.8 Oracle Siebel Applications 18.7 Oracle Retail Order Broker 5.2 Oracle Retail Order Broker 5.1 Oracle Retail Order Broker 15.0 Oracle MySQL Enterprise Monitor 8.0.2.8191 Oracle MySQL Enterprise Monitor 4.0.6.5281 Oracle MySQL Enterprise Monitor 3.4.9.4237 Oracle MICROS XBRi 10.8.3 Oracle MICROS XBRi 10.8.2 Oracle MICROS XBRi 10.8.1 Oracle MICROS XBRi 10.7 Oracle MICROS XBRi 10.6 Oracle MICROS XBRi 10.5 Oracle MICROS Relate CRM Software 11.4 Oracle Managed File Transfer 12.2.1.3.0 Oracle Managed File Transfer 12.1.3.0.0 Oracle Instantis EnterpriseTrack 17.3 Oracle Instantis EnterpriseTrack 17.2 Oracle Instantis EnterpriseTrack 17.1 Oracle Hospitality Guest Access 4.2.1 Oracle Hospitality Guest Access 4.2 Oracle FMW Platform 12.2.1.3.0 Oracle Communications Instant Messaging Server 10.0.1.2.0 Oracle Agile PLM 9.3.5 Oracle Agile PLM 9.3.3 Oracle Agile PLM 9.3.6 Oracle Agile PLM 9.3.4 Oracle Agile Engineering Data Management 6.2.1 Oracle Agile Engineering Data Management 6.2 Oracle Agile Engineering Data Management 6.1.3 NetApp SolidFire VMware vCenter 0 Debian Linux 7.0 Bluecoat Director 6.1 Apache Tomcat 9.0.4 Apache Tomcat 9.0.1 Apache Tomcat 8.5.27 Apache Tomcat 8.5.24 Apache Tomcat 8.5.23 Apache Tomcat 8.5.16 Apache Tomcat 8.5.15 Apache Tomcat 8.5.14 Apache Tomcat 8.5.13 Apache Tomcat 8.5.12 Apache Tomcat 8.5.11 Apache Tomcat 8.5.9 Apache Tomcat 8.5.8 Apache Tomcat 8.5.7 Apache Tomcat 8.5.6 Apache Tomcat 8.5.5 Apache Tomcat 8.5.4 Apache Tomcat 8.5.1 Apache Tomcat 8.0.49 Apache Tomcat 8.0.47 Apache Tomcat 8.0.46 Apache Tomcat 8.0.45 Apache Tomcat 8.0.44 Apache Tomcat 8.0.43 Apache Tomcat 8.0.42 Apache Tomcat 8.0.41 Apache Tomcat 8.0.40 Apache Tomcat 8.0.39 Apache Tomcat 8.0.38 Apache Tomcat 8.0.37 Apache Tomcat 8.0.36 Apache Tomcat 8.0.35 Apache Tomcat 8.0.34 Apache Tomcat 8.0.33 Apache Tomcat 8.0.30 Apache Tomcat 8.0.27 Apache Tomcat 8.0.19 Apache Tomcat 8.0.17 Apache Tomcat 8.0.15 Apache Tomcat 8.0.3 Apache Tomcat 8.0.1 Apache Tomcat 7.0.84 Apache Tomcat 7.0.82 Apache Tomcat 7.0.81 Apache Tomcat 7.0.80 Apache Tomcat 7.0.79 Apache Tomcat 7.0.78 Apache Tomcat 7.0.77 Apache Tomcat 7.0.76 Apache Tomcat 7.0.75 Apache Tomcat 7.0.74 Apache Tomcat 7.0.73 Apache Tomcat 7.0.72 Apache Tomcat 7.0.70 Apache Tomcat 7.0.69 Apache Tomcat 7.0.67 Apache Tomcat 7.0.65 Apache Tomcat 7.0.60 Apache Tomcat 7.0.59 Apache Tomcat 7.0.57 Apache Tomcat 7.0.54 Apache Tomcat 7.0.53 Apache Tomcat 7.0.50 Apache Tomcat 7.0.33 Apache Tomcat 7.0.32 Apache Tomcat 7.0.31 Apache Tomcat 7.0.30 Apache Tomcat 7.0.29 Apache Tomcat 7.0.28 Apache Tomcat 7.0.27 Apache Tomcat 7.0.26 Apache Tomcat 7.0.25 Apache Tomcat 7.0.24 Apache Tomcat 7.0.23 Apache Tomcat 7.0.17 Apache Tomcat 7.0.16 Apache Tomcat 7.0.15 Apache Tomcat 7.0.14 Apache Tomcat 7.0.13 Apache Tomcat 7.0.12 Apache Tomcat 7.0.8 Apache Tomcat 7.0.7 Apache Tomcat 7.0.6 Apache Tomcat 7.0.4 Apache Tomcat 7.0.3 Apache Tomcat 7.0.2 Apache Tomcat 7.0.1 Apache Tomcat 7.0 Apache Tomcat 9.0.0.M1 Apache Tomcat 8.5.3 Apache Tomcat 8.5.2 Apache Tomcat 8.5.0 Apache Tomcat 8.0.48 Apache Tomcat 8.0.32 Apache Tomcat 8.0.0.RC1 Apache Tomcat 8.0.0-RC6 Apache Tomcat 8.0.0-RC5 Apache Tomcat 8.0.0-RC3 Apache Tomcat 8.0.0-RC10 Apache Tomcat 8.0.0-RC1 Apache Tomcat 8.0.0 Rc5 Apache Tomcat 8.0.0 Rc2 Apache Tomcat 8.0.0 Rc10 Apache Tomcat 8.0.0 Rc1 Apache Tomcat 7.0.68 Apache Tomcat 7.0.55 Apache Tomcat 7.0.5 Apache Tomcat 7.0.49 Apache Tomcat 7.0.48 Apache Tomcat 7.0.47 Apache Tomcat 7.0.46 Apache Tomcat 7.0.45 Apache Tomcat 7.0.44 Apache Tomcat 7.0.43 Apache Tomcat 7.0.42 Apache Tomcat 7.0.41 Apache Tomcat 7.0.40 Apache Tomcat 7.0.39 Apache Tomcat 7.0.38 Apache Tomcat 7.0.37 Apache Tomcat 7.0.36 Apache Tomcat 7.0.35 Apache Tomcat 7.0.34 Apache Tomcat 7.0.22 Apache Tomcat 7.0.21 Apache Tomcat 7.0.20 Apache Tomcat 7.0.19 Apache Tomcat 7.0.18 Apache Tomcat 7.0.11 Apache Tomcat 7.0.10
Not Vulnerable:	Apache Tomcat 8.5.28 Apache Tomcat 8.0.50 Apache Tomcat 7.0.85

Apache Tomcat CVE-2018-1305 Security Bypass Vulnerability

Apache Tomcat is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.

Apache Tomcat CVE-2018-1305 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache Tomcat CVE-2018-1305 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache Tomcat CVE-2018-1305 Security Bypass Vulnerability

References:

• Apache Homepage (Apache)
  
• Bug 1548282 - (CVE-2018-1305) CVE-2018-1305 tomcat: Late application of securit (Redhat)
  
• [SECURITY] [DLA 1301-1] tomcat7 security update (Debian)
  
• Apache Tomcat Vulnerabilities in NetApp Products (NetApp)
  
• CVE-2018-1305 (Redhat)
  
• Oracle Critical Patch Update Advisory - April 2019 (Oracle)
  
• Oracle Critical Patch Update Advisory - July 2019 (Oracle)
  
• Oracle Critical Patch Update Advisory - October 2018 (Oracle)
  
• Oracle Solaris Third Party Bulletin - April 2018 (Oracle)
  
• SYMSA1463: Apache Tomcat Vulnerabilities Jan-Aug 2018 (Symantec)
  
• USN-3665-1: Tomcat vulnerabilities (Ubuntu)