F5-K000150484
First published: Thu Mar 20 2025(Updated: )
Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98. If all of the following were true, a malicious user was able to view security sensitive files and/or inject content into those files: - writes enabled for the default servlet (disabled by default) - support for partial PUT (enabled by default) - a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads - attacker knowledge of the names of security sensitive files being uploaded - the security sensitive files also being uploaded via partial PUT If all of the following were true, a malicious user was able to perform remote code execution: - writes enabled for the default servlet (disabled by default) - support for partial PUT (enabled by default) - application was using Tomcat's file based session persistence with the default storage location - application included a library that may be leveraged in a deserialization attack Users are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 Traffix Systems Signaling Delivery Controller | =5.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of F5-K000150484?
The severity of F5-K000150484 is critical, as it allows for remote code execution and information disclosure.
How do I fix F5-K000150484?
To fix F5-K000150484, upgrade Apache Tomcat to a version that is not affected, specifically beyond 11.0.2 and 10.1.0-M1.
What are the consequences of F5-K000150484?
The consequences of F5-K000150484 include potential remote code execution, information disclosure, and the risk of malicious content being added to uploaded files.
Which versions of Apache Tomcat are affected by F5-K000150484?
F5-K000150484 affects Apache Tomcat versions from 11.0.0-M1 through 11.0.2 and from 10.1.0-M1 through certain later versions.
What is the main cause of vulnerability F5-K000150484?
The main cause of vulnerability F5-K000150484 is path equivalence issues, specifically related to 'file.Name' leading to file handling vulnerabilities in the servlet.
- collector/f5-advisory
- source/F5
- alias/CVE-2025-24813
- agent/software-canonical-lookup
- agent/severity
- agent/references
- agent/source
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/type
- agent/event
- vendor/f5
- canonical/f5 traffix systems signaling delivery controller
- version/f5 traffix systems signaling delivery controller/5.2.0