CVE-2020-1938: Apache Tomcat AJP Connector Remote Code Execution Vulnerability Alert

by · Published · Updated

Apache Tomcat is an open-source implementation of the Java Servlet, JavaServer Pages, Java Expression Language, and WebSocket technologies. Tomcat provides a “pure Java” HTTP web server environment in which Java code can run. Recently, Apache Tomcat fixed a vulnerability (CVE-2020-1938) that allows an attacker to read any webapps files (such as webapp configuration files, source code, etc.) or include a file to remote code execution. The PoC was published.

Most server hosting providers fixed this Apache Tomcat Vulnerability earlier. However, You need to pick a Fastest WordPress Hosting company that always updates their Tomcat to the latest version thus benefiting with better security to safeguard against attacks and Vulnerabilities

Affected Version

  • Apache Tomcat 6
  • Apache Tomcat 7x <7.0.100
  • Apache Tomcat 8x <8.5.51
  • Apache Tomcat 9x <9.0.31

Unaffected version

  • Apache Tomcat 6 is no longer maintained. Please upgrade to the latest supported version of Tomcat to avoid the vulnerability.
  • Tomcat 7.0.0100
  • Tomcat 8.5.51
  • Tomcat 9.0.31

Tags: