MIRAGE
Threat IntelligenceCVEs › CVE-2017-12617

CVE-2017-12617 — exposed on the internet

Internet exposure observed by OffSeq scans · last 30 days

3
Exposed hosts
8.1
CVSS
100.0%
EPSS

Found on 3 internet-exposed hosts by OffSeq scans; no in-the-wild exploitation has been observed against OffSeq honeypots in this window.

About CVE-2017-12617

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

CWE-434

OffSeq internet scanning found CVE-2017-12617 on 3 exposed hosts in the last 30 days. OffSeq honeypots have not recorded in-the-wild exploitation of this CVE in the current window — this page tracks its exposure footprint and status; if exploitation begins, the live honeypot signal will appear here.

Exposed-host countries

Exposed via

tomcat

Open the live CVE-2017-12617 view →

References