Lucene search
GoogleOSV:CVE-2020-1745HistoryApr 28, 2020 - 3:15 p.m.
CVE-2020-1745
2020-04-2815:15:13
Google
osv.dev
9
A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1745
meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/
security.netapp.com/advisory/ntap-20240216-0011/
www.cnvd.org.cn/webinfo/show/5415
www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487
Related
osv
osv
Improper Authorization in Undertoe
2022-05-24 17:16:46
Improper Privilege Management in Tomcat
2020-06-15 18:51:21
BIT-tomcat-2020-1938
2024-03-06 11:11:29
redhatcve
redhatcve
CVE-2020-1938
2020-02-24 06:10:47
CVE-2020-1745
2020-02-26 04:10:51
nessus
nessus
Photon OS 3.0: Apache PHSA-2020-3.0-0069
2020-03-24 00:00:00
JFrog < 7.9.0 File Inclusion Vulnerability
2021-03-12 00:00:00
redhat
redhat
prion
prion
Remote code execution
2020-04-28 15:15:00
Default configuration
2020-02-24 22:15:00
Design/Logic Flaw
2020-04-21 19:15:00
veracode
veracode
Directory Traversal
2020-03-13 00:44:21
Authentication Bypass
2020-02-25 05:53:16
ubuntucve
ubuntucve
CVE-2020-1745
2020-04-28 00:00:00
CVE-2020-1938
2020-02-24 00:00:00
cve
cve
nvd
nvd
cvelist
cvelist
debiancve
debiancve
CVE-2020-1745
2020-04-28 15:15:13
CVE-2020-1938
2020-02-24 22:15:12
github
github
Improper Authorization in Undertoe
2022-05-24 17:16:46
Improper Privilege Management in Tomcat
2020-06-15 18:51:21
photon
photon
Critical Photon OS Security Update - PHSA-2020-0285
2020-03-09 00:00:00
Critical Photon OS Security Update - PHSA-2020-0218
2020-03-09 00:00:00
oraclelinux
oraclelinux
tomcat6 security update
2020-03-23 00:00:00
tomcat security update
2020-03-22 00:00:00
openvas
openvas
CentOS: Security Advisory for tomcat6 (CESA-2020:0912)
2020-03-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0806-1)
2021-04-19 00:00:00
Fedora: Security Advisory for tomcat (FEDORA-2020-04ac174fa9)
2020-04-03 00:00:00
ibm
ibm
qualysblog
qualysblog
githubexploit
githubexploit
Exploit for Improper Privilege Management in Apache Tomcat
2021-04-27 14:57:30
Exploit for Improper Privilege Management in Apache Tomcat
2020-11-14 13:55:58
Exploit for CVE-2020-1938
2021-08-14 17:32:51
threatpost
threatpost
Apache Tomcat Exploit Poised to Pounce, Stealing Files
2020-03-23 20:56:37
Wordpress Yellow Pencil Plugin Flaws Actively Exploited
2019-04-12 14:13:06
Users Urged to Uninstall WordPress Yuzo Plugin After Flaw Exploited
2019-04-11 17:19:40
metasploit
metasploit
Apache Tomcat AJP File Read
2020-11-16 13:57:13
fedora
fedora
[SECURITY] Fedora 32 Update: tomcat-9.0.31-2.fc32
2020-03-31 00:18:31
[SECURITY] Fedora 30 Update: tomcat-9.0.31-2.fc30
2020-04-02 09:19:40
[SECURITY] Fedora 31 Update: tomcat-9.0.31-2.fc31
2020-04-02 09:56:06
centos
centos
tomcat6 security update
2020-03-25 19:21:34
tomcat security update
2020-03-25 19:05:03
myhack58
myhack58
f5
f5
K53254186 : Apache Tomcat vulnerability CVE-2020-1938
2020-03-04 00:00:00
K73059510 : Undertow vulnerabilities CVE-2019-10212 and CVE-2020-1745
2020-05-12 00:00:00
cisa_kev
cisa_kev
Apache Tomcat Improper Privilege Management Vulnerability
2022-03-03 00:00:00
packetstorm
packetstorm
Apache Tomcat AJP File Read
2024-08-31 00:00:00
cgr
cgr
CVE-2020-1938 vulnerabilities
2024-05-19 03:07:16
huawei
huawei
Security Advisory - Apache Tomcat File Inclusion Vulnerability
2020-07-15 00:00:00
exploitdb
exploitdb
Apache Tomcat - AJP 'Ghostcat File Read/Inclusion
2020-02-20 00:00:00
Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit)
2020-11-13 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2020-12-04 19:27:53
trendmicroblog
trendmicroblog
checkpoint_advisories
checkpoint_advisories
Apache Tomcat AJP File Inclusion (CVE-2020-1938; CVE-2022-26377)
2020-02-25 00:00:00
attackerkb
attackerkb
CVE-2020-10569
2020-04-21 00:00:00
CVE-2020-1938
2020-02-24 00:00:00
amazon
amazon
Important: tomcat8
2020-03-09 19:21:00
Important: tomcat7
2020-03-09 19:20:00
Important: tomcat
2020-03-09 19:23:00
kaspersky
kaspersky
KLA11679 Multiple vulnerabilities in Apache Tomcat
2020-02-24 00:00:00
debian
debian
[SECURITY] [DSA 4673-1] tomcat8 security update
2020-05-03 18:29:38
[SECURITY] [DLA 2133-1] tomcat7 security update
2020-03-04 18:14:50
[SECURITY] [DLA 2209-1] tomcat8 security update
2020-05-28 17:53:49
tomcat
tomcat
Fixed in Apache Tomcat 8.5.51
2020-02-11 00:00:00
Fixed in Apache Tomcat 9.0.31
2020-02-11 00:00:00
Fixed in Apache Tomcat 7.0.100
2020-02-14 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2020-03-10 22:04:50
thn
thn
GhostCat: New High-Risk Vulnerability Affects Servers Running Apache Tomcat
2020-02-28 13:00:00
Critical Flaws Reported in Philips Vue PACS Medical Imaging Systems
2021-07-09 07:00:00
suse
suse
Security update for apache2 (important)
2020-05-02 00:00:00
Security update for tomcat (important)
2020-03-15 00:00:00
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2020-03-19 00:00:00
atlassian
atlassian
symantec
symantec
Apache Tomcat Vulnerabilities Oct 2018 – Feb 2020
2020-05-12 19:02:01