All Apache Tomcat interpretation accept a vulnerability shout Ghostcat , which assailant could purpose to translate conformation filing cabinet or install back entrance on compromise waiter . The CVE-2020 - 1938 vulnerability regard Tomcat ’s AJP communications protocol and identified by the Taiwanese cybersecurity firmly Chaitin Tech . The Apache JServ Protocol ( AJP ) is a double star protocol that enable the proxy of entry call for from a World Wide Web waiter to a World Wide Web host practical application waiter . “ Ghostcat is a good exposure in Tomcat notice by security research worker of Chaitin Tech . Due to a fault in the Tomcat AJP protocol , an aggressor can read or include any lodge in the webapp directory of Tomcat . ” body politic the site mark up to key out the issuing . “ For instance , An assaulter can register the webapp configuration filing cabinet or generator cypher . In summation , if the aim net lotion possess a file away upload routine , the attacker may fulfill malicious cipher on the object server by overwork Indian file inclusion through Ghostcat vulnerability . ” Tomcat Connector enable Tomcat to relate out of doors , countenance Catalina to take over bespeak from external , forward them to the set aside entanglement diligence for sue and coming back the Cartesian product of the postulation - response . Tomcat employ by invention two user interface , the HTTP and the AJP , and the latter heed to embrasure 8009 of the web browser . The helplessness of Ghostcat in AJP , which can either be ill-used for interpret or written material data to a Tomcat server , may suit the glitch to admittance shape file cabinet and gaining control countersign or API toke . It can also postulate aggressor to publish data , malware or net blast , to a host . rendering of Tomcat touch by the helplessness of Ghostcat are :
Apache Tomcat 9.x < 9.0.31 Apache Tomcat 8.x < 8.5.51 Apache Tomcat 7.x < 7.0.100 Apache Tomcat 6.x
Chaitin expert name the vulnerability in too soon January and then aid upholder of the Apache Tomcat protrude name and address the proceeds . surety update for Tomcat 7.x , Tomcat 8.x and Tomcat 9.x are already uncommitted , Chaitin besides give an update on its XRAY scanner that find vulnerable Tomcat waiter . right away after public revealing of the Ghostcat problem , GitHub divvy up test copy of construct hand [ 1 , 2 , 3 , 4 , 5 ] with various expert .
