CVE:CVE-2018-1304
CNNVD:CNNVD-201802-668
Apache Tomcat是美国阿帕奇（Apache）软件基金会下属的Jakarta项目的一款轻量级Web应用服务器，它主要用于开发和调试JSP程序，适用于中小型系统。
Apache Tomcat中存在安全漏洞。攻击者可利用该漏洞访问受保护的Web应用程序资源。以下版本受到影响：Apache Tomcat 9.0.0.M1到9.0.4版本，8.5.0版本到8.5.27版本，8.0.0.RC1版本至8.0.49版本，7.0.0版本至7.0.84版本。
solution:Upgrade apache tomcat to a higher version than 7.0.84,8.0.49,8.5.27,9.0.4,8.0.0:rc1,9.0.0:m1,9.0.0:m10,9.0.0:m11,9.0.0:m12,9.0.0:m13,9.0.0:m14,9.0.0:m15,9.0.0:m16,9.0.0:m17,9.0.0:m18,9.0.0:m19,9.0.0:m2,9.0.0:m20,9.0.0:m21,9.0.0:m22,9.0.0:m23,9.0.0:m24,9.0.0:m25,9.0.0:m26,9.0.0:m27,9.0.0:m3,9.0.0:m4,9.0.0:m5,9.0.0:m6,9.0.0:m7,9.0.0:m8,9.0.0:m9,and avoid the version [7.0.0,7.0.84],[8.0.0,8.0.49],[8.5.0,8.5.27],[9.0.0,9.0.4],8.0.0:rc1,9.0.0:m1,9.0.0:m10,9.0.0:m11,9.0.0:m12,9.0.0:m13,9.0.0:m14,9.0.0:m15,9.0.0:m16,9.0.0:m17,9.0.0:m18,9.0.0:m19,9.0.0:m2,9.0.0:m20,9.0.0:m21,9.0.0:m22,9.0.0:m23,9.0.0:m24,9.0.0:m25,9.0.0:m26,9.0.0:m27,9.0.0:m3,9.0.0:m4,9.0.0:m5,9.0.0:m6,9.0.0:m7,9.0.0:m8,9.0.0:m9; Upgrade redhat jboss_enterprise_application_platform to a higher version than 6,6.4,and avoid the version 6,6.4; Upgrade redhat jboss_enterprise_web_server to a higher version than 3.0.0,and avoid the version 3.0.0; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade oracle fusion_middleware to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,4.2.1,and avoid the version 4.2.0,4.2.1; Upgrade oracle micros_relate_crm_software to a higher version than 11.4,and avoid the version 11.4; Upgrade oracle secure_global_desktop to a higher version than 5.3,5.4,and avoid the version 5.3,5.4; Upgrade redhat jboss_middleware to a higher version than 1,and avoid the version 1