All Questions
13 questions
1
vote
0
answers
2k
views
Disabling weak cipher suites in Tomcat does not work as expected
I have to get rid of so called "weak security" in a Tomcat application.
A penetration test identified services that accept connections with insecure TLS encryption and hashing algorithms: ...
- 12.6k
1
vote
2
answers
11k
views
Tomcat application arbitrary file read exploitation
In recent black-box pen-test of a webapp hosted on CentOS, I found a vulnerability that allowed me to grab contents of files (kind of file inclusion) located within the home path of Tomcat.
In ...
CommunityBot
- 1
1
vote
1
answer
4k
views
What measures can be taken to prevent Server Side Request Forgery (SSRF) in a JAX-RS Application running on Apache Tomcat?
If I have a an application server that uses an implementation of JAX-RS, and is running as *.war file on an Apache Tomcat server, is there anything special that needs to be done or configured to ...
- 492
0
votes
0
answers
910
views
Vulnerable Apache Tomcat server
I am a bug bounty hunter. When doing some research, I found a subdomain that is using Apache Tomcat. Talk about Tomcat, there was a vulnerability found in 2017: CVE-2017-12617.
Any Apache Tomcat ...
5
votes
1
answer
2k
views
Does TrustManager PKIX (or RFC 3280/X.509) really check the expiration date of a client's certificate?
It was noticed that the default java implementation of TrustManagerFactory for PKIX trust manager algorithm (X509ExtendedTrustManager) doesn't really check the expiration date of a client's ...
- 153
3
votes
2
answers
1k
views
Security Benefits of Reverse Proxying Java / Tomcat WebApps Locally
Conventional wisdom seems to dictate that java applications should always be reverse proxied. It's what I have always done and so has everywhere I have worked at.
I have read multiple times that ...
- 125
1
vote
1
answer
661
views
Is this parameter vulnerable to SQL Injection?
The backend server is running Tomcat 8.5 (Java backend). The URL in question is:
https://website.com/application/servlet.do?currentOID=abc12300000000
I found that when I give an incomplete OID (i.e ...
1
vote
0
answers
123
views
Are java bean oids predictable?
For example, I'm facing bean names such as "<3 CHAR PREFIX>" ex. "FIL000000AZB3Y" (random name) where FIL refers to a File object, and the 0000... is the OID. Is it possible to predict this, or is ...
- 269
2
votes
1
answer
1k
views
Sanitize 3rd party XSS post in Java API
We have some RESTful API services that we have been using for several years. Recently we have started considering surfacing these to 3rd party clients so they can write their own UIs and we can work ...
CommunityBot
- 1
0
votes
1
answer
591
views
Access encrypted files (dm-crypt/LUKS) through web app
I'm a newbie to encryption issues and I'm trying to sort out a few questions.
For a distributed application we need to deploy a server outside of our company with sensitives PDF files on it. That ...
- 103
1
vote
1
answer
198
views
What are the implication of having Apache Tomcat servlets available publicly?
While testing a website which had Apache Tomcat running, I came across a directory called "Examples" which contained "Servlet Examples", "JSP Examples" and "Websocket Examples".
What do you think are ...
- 8,702
1
vote
3
answers
1k
views
Is it necessary to update JRE in an Apache Tomcat Server?
We have a Java web application contained in an apache tomcat instance. JRE version is 7.0.51 and Tomcat version is 7.0.42.
Users have expressed their concerns about Java 7's support/updates being ...
CommunityBot
- 1
1
vote
2
answers
4k
views
What algorithm should I use to avoid the error "ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY"?
I got a CA cert by submitting my CSR from GoDaddy, after applying a certificate to my Tomcat web server. When I access my website using Chrome or Mozilla I face the error:
...
- 742