tomcat &jboss 漏洞结果

Open dbgee opened this issue 3 years ago • 1 comments

Apache tomcat CVE-2017-12615|PUT http://xxx:8088/oa/index.jsp/tomcatPut.jsp/
Apache tomcat CVE-2017-12615|PUT http://xxxx:8088/oa/index.jsp/tomcatPut.jsp/
jboss Console |http://xxxx:8088/oa/index.jsp/web-console/Invoker|application/x-java-serialized-object; class=org.jboss.console.remote.RemoteMBeanInvocation postData:xxx.war binary
jboss Console |http://xxxxxxx:8082/#/web-console/Invoker|application/x-java-serialized-object; class=org.jboss.console.remote.RemoteMBeanInvocation postData:xxx.war binary
Apache tomcat CVE-2017-12615|PUT http://xxxx/oa/index.jsp/tomcatPut.jsp/
Apache tomcat CVE-2017-12615|PUT xxxxxxx/oa/index.jsp/tomcatPut.jsp/

大佬，好多这种漏洞，利用方法是啥？直接访问 tomcatPut.jsp 好像没反应，不知道是不是误报

Jun 09 '22 02:06 dbgee