The version of Tomcat installed on the remote host is prior to 9.0.19. It is, therefore, affected by multiple vulnerabilities as referenced in the fixed_in_apache_tomcat_9.0.19_security-9 advisory.

  - When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to     9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way     the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option     enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all     versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus     Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-     windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.m     icrosoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-     way/). (CVE-2019-0232)

  - The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes     user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The     printenv command is intended for debugging and is unlikely to be present in a production website.
    (CVE-2019-0221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Apache Tomcat 9.0.0.M1 < 9.0.19 multiple vulnerabilities

high Nessus Plugin ID 197856

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 1.3 May 25, 2024, 4:53 AM CEA reference Plugin Feed: 202405250453
Version 1.2 May 24, 2024, 10:34 AM Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202405241034
Version 1.1 May 23, 2024, 8:37 PM New Plugin Feed: 202405232037