What’s Vulnerable › Vulnerabilities
CVE-2018-1305
- Severity: medium (CVSS 6.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 14.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-02-23 · updated 2026-10-15
Description
Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them.
Affected products
- Apache Tomcat: from 7.0.0 through 7.0.84; from 8.0.0 through 8.0.49; from 8.5.0 through 8.5.27; 8.0.0-rc1, 8.0.0-rc10, 8.0.0-rc3, 8.0.0-rc5, 9.0.0, 9.0.0-milestone1 (+30)
- Canonical Ubuntu Linux: 14.04, 16.04, 17.10, 18.04
- Debian Linux: 7.0, 8.0, 9.0
- Oracle Corporation Oracle Enterprise Manager for Fusion Middleware: 12.2.1.3.0
- Oracle Corporation Oracle Managed File Transfer: 12.1.3.0.0, 12.2.1.3.0
- Oracle Micros Relate Crm Software: 11.4
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- http://www.securityfocus.com/bid/103144
- http://www.securitytracker.com/id/1040428
- https://access.redhat.com/errata/RHSA-2018:0465
- https://access.redhat.com/errata/RHSA-2018:0466
- https://access.redhat.com/errata/RHSA-2018:1320
- https://access.redhat.com/errata/RHSA-2018:2939
- https://access.redhat.com/errata/RHSA-2019:2205
- https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
Get alerted when CVE-2018-1305 or the next vulnerability affects your stack