Strike ID:
E19-0qvs1
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
t
Variants:
4
Year:
2019

Description

This strike replicates an attack on Apache Tomcat based on a Windows command injection vulnerability. The flaw resides in the way the command arguments for a CGI script are transmitted from the requests parameters on the Windows OS. By exploiting this vulnerability, a remote unauthenticated attacker can execute commands on the host system.

CVE

References

MSB

BID

ExploitDB

Secunia

Security Tracker

Metasploit

ZDI

Google

OSVDB

{}