Vulnerabilitycritical

GhostCat: New High-Risk Vulnerability Affects Servers Running Apache Tomcat

The Hacker Newsby @TheHackersNewsFeb 28, 2020 · 18:37 UTC (Feb 28, 2020)2 min read8 · 5 reads

Read at thehackernews.com

Analyze CVE-2020-1938 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-1938 CVE-2020-1935 CVE-2019-17569

Tags: cve-2020-1938 cve-2020-1935 cve-2019-17569 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-1938 +2 related CVEs CVE-2020-1935 CVE-2019-17569	Ghostcat (CVE-2020-1938): Unauthenticated File Read/JSP RCE via AJP in Apache Tomcat	9.8 group max	99%	KEVPoC	Feb 24, 2020 KEV Mar 3, 2022

From the original article

2 min read at thehackernews.com

If your web server is running on Apache Tomcat, you should immediately install the latest available version of the server application to prevent hackers from taking unauthorized control over it. Yes, that's possible because all versions (9. x/8.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.