Malware, Network Security, Vulnerability Management

Apache Tomcat vulnerability results in remote code exectuion

April 16, 2019

Security researchers identified a remote code execution on windows vulnerability in Apache Tomcat.

The vulnerability is rated “Important” and was identified by an external security researcher and reported to the Apache Tomcat security team via the bug bounty program, according to an April 10 blog post.

The vulnerability leaves the CGI Servlet at risk due to a flaw in the way the JRE passes command line arguments to Windows and occurs when running on Windows with enableCmdLineArguments enabled.

Both the CGI Servlet and the CGI option enableCmdLineArguments are disabled by default in Tomcat 9.0.x and will be disabled by default in all versions in response to this vulnerability.

Researchers recommend users of affected versions should apply one of the following mitigations to ensure the CGI Servlet initialization parameter enableCmdLineArguments is set to false and upgrading to the latest version of Apache Tomcat.

An In-Depth Guide to Network Security

Get essential knowledge and practical strategies to fortify your network security.

Learn More

Robert Abel

Identity

North Korean hackers targeting workers in nuclear power sector

Shaun NicholsDecember 20, 2024

Threat actors associated with the notorious North Korean hacking outfit Lazarus Group are now setting their sites on targets in the nuclear power sector

Malware

Mirai botnet actively targeting vulnerable Juniper routers

SC StaffDecember 20, 2024

Attacks with the Mirai botnet malware were disclosed by Juniper Networks to have been targeted at its Session Smart Routers with default passwords, according to reports.

Cyber war attack on world globe, global computing security, protection from hacking

IoT

Suspected Chinese malware operation HiatusRAT menacing IoT devices

Shaun NicholsDecember 19, 2024

FBI says malware operation is building a botnet out of smart cameras and video boxes.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news