#Apache tomcat 9.0 27 exploit software

In the drainChannel () method, ClusterData is encapsulated into a ChannelMessage type, and in the subsequent process, the messageDataReceived () method is called in turn.įinally, we enter the ssageReceived () method.Īnd we call the serialize () method in the messageReceived () method to perform the deserialization and execute the malicious command in the passed serialized data.Ībove all, the vulnerability exploitation ends. The tomcat server loads data in the . () method. Attackers can use tomcat's own session synchronization through a specially crafted data packet and exploit this vulnerability to launch remote code execution attack. When the Tomcat server uses its own session synchronization, an insecure configuration (without using EncryptInterceptor) leads to a deserialization vulnerability. On May 20, 2020, Apache Tomcat officially released a security bulletin that disclosed a vulnerability causing remote code execution through cluster synchronization sessions. The application is widely used in small and medium-sized systems and concurrent access users, and it is the first choice for developing and debugging JSP programs. It is also a lightweight application server. Tomcat is a free open source web application. Thanks to Sun's participation and support, the latest Servlet and JSP specifications are always reflected in Tomcat, and Tomcat 5 supports the latest Servlet 2.4 and JSP 2.0 standard.

It is developed by Apache, Sun and other individuals and companies.

#Apache tomcat 9.0 27 exploit software

Tomcat is a core project of Jakarta on Apache Software Foundation.