CVE-2019-0232

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-0232
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-0232.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-0232
Aliases
Downstream
Published
2019-04-15T15:29:00Z
Modified
2026-10-16T02:47:33Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/).

References

Affected packages

Git / github.com/apache/tomcat

Affected ranges

Type
GIT
Repo
https://github.com/apache/tomcat
Events
Introduced
e498667bd7811e846771a852b16ce9f1e524b81b
Last Affected
813426f377e0f26ed1e8b6bc70abad881bfa4409
Introduced
e37b977db6f47e4380ad67114a49e8568951c953
Last Affected
f481565d959dc5a5eae1576cc294774c8683b4dc
Introduced
3c78e95e36268dfb76db1570f0cf49104fa6eabc
Last Affected
25d7c99e8c44a41a08ba85ccaba3cfec6af9c801
Introduced
29b07def810d335012e738b22ab44d4e232b50d1
Last Affected
45f8fd74cdb96490fab8709263a4d862f0d429cf
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "7.0.0"
                },
                {
                    "last_affected": "7.0.93"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "8.5.0"
                },
                {
                    "last_affected": "8.5.39"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.1"
                },
                {
                    "last_affected": "9.0.17"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone1"
                },
                {
                    "last_affected": "9.0.0-milestone1"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone10"
                },
                {
                    "last_affected": "9.0.0-milestone10"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone11"
                },
                {
                    "last_affected": "9.0.0-milestone11"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone12"
                },
                {
                    "last_affected": "9.0.0-milestone12"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone13"
                },
                {
                    "last_affected": "9.0.0-milestone13"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone14"
                },
                {
                    "last_affected": "9.0.0-milestone14"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone15"
                },
                {
                    "last_affected": "9.0.0-milestone15"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone16"
                },
                {
                    "last_affected": "9.0.0-milestone16"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone17"
                },
                {
                    "last_affected": "9.0.0-milestone17"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone18"
                },
                {
                    "last_affected": "9.0.0-milestone18"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone19"
                },
                {
                    "last_affected": "9.0.0-milestone19"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone2"
                },
                {
                    "last_affected": "9.0.0-milestone2"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone20"
                },
                {
                    "last_affected": "9.0.0-milestone20"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone21"
                },
                {
                    "last_affected": "9.0.0-milestone21"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone22"
                },
                {
                    "last_affected": "9.0.0-milestone22"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone23"
                },
                {
                    "last_affected": "9.0.0-milestone23"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone24"
                },
                {
                    "last_affected": "9.0.0-milestone24"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone25"
                },
                {
                    "last_affected": "9.0.0-milestone25"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone26"
                },
                {
                    "last_affected": "9.0.0-milestone26"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone3"
                },
                {
                    "last_affected": "9.0.0-milestone3"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone4"
                },
                {
                    "last_affected": "9.0.0-milestone4"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone5"
                },
                {
                    "last_affected": "9.0.0-milestone5"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone6"
                },
                {
                    "last_affected": "9.0.0-milestone6"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone7"
                },
                {
                    "last_affected": "9.0.0-milestone7"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone8"
                },
                {
                    "last_affected": "9.0.0-milestone8"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0-milestone9"
                },
                {
                    "last_affected": "9.0.0-milestone9"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

9.*
9.0.0-milestone1
9.0.0-milestone10
9.0.0-milestone11
9.0.0-milestone12
9.0.0-milestone13
9.0.0-milestone14
9.0.0-milestone15
9.0.0-milestone16
9.0.0-milestone17
9.0.0-milestone18
9.0.0-milestone19
9.0.0-milestone2
9.0.0-milestone20
9.0.0-milestone21
9.0.0-milestone22
9.0.0-milestone23
9.0.0-milestone24
9.0.0-milestone25
9.0.0-milestone26
9.0.0-milestone3
9.0.0-milestone4
9.0.0-milestone5
9.0.0-milestone6
9.0.0-milestone7
9.0.0-milestone8
9.0.0-milestone9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-0232.json"