{"id":1253,"date":"2017-10-18T00:54:59","date_gmt":"2017-10-17T15:54:59","guid":{"rendered":"http:\/\/www.myu-zin.com\/webridge\/?p=1253"},"modified":"2017-10-18T00:54:59","modified_gmt":"2017-10-17T15:54:59","slug":"apache-tomcat-%e3%81%ae%e8%a4%87%e6%95%b0%e3%81%ae%e8%84%86%e5%bc%b1%e6%80%a7%e3%81%ab%e5%af%be%e3%81%99%e3%82%8b%e3%82%a2%e3%83%83%e3%83%97%e3%83%87%e3%83%bc%e3%83%88jvnvu99259676-ipa%e6%83%85","status":"publish","type":"post","link":"https:\/\/www.myu-zin.com\/webridge\/archives\/1253.html","title":{"rendered":"Apache Tomcat \u306e\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8[JVNVU#99259676 ]IPA\u60c5\u5831\u30002017\/10\/04\u66f4\u65b0"},"content":{"rendered":"

\"\"<\/p>\n

IPA\u306e\u30b5\u30a4\u30c8\u304b\u3089\u4e0b\u8a18\u5185\u5bb9\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5bfe\u7b56\u60c5\u5831\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n

URL
\nhttps:\/\/www.ipa.go.jp\/security\/index.html<\/a><\/p>\n

\n
\n

\u6982\u8981<\/h2>\n

The Apache Software Foundation \u304b\u3089\u3001Apache Tomcat \u306b\u95a2\u3059\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002<\/p><\/blockquote>\n<\/div>\n

\n
\n

\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b7\u30b9\u30c6\u30e0<\/h2>\n

CVE-2017-12615<\/p>\n

    \n
  • Apache Tomcat 7.0.0 \u304b\u3089 7.0.79 \u307e\u3067<\/li>\n<\/ul>\n

    CVE-2017-12616<\/p>\n

      \n
    • Apache Tomcat 7.0.0 \u304b\u3089 7.0.80 \u307e\u3067<\/li>\n<\/ul>\n

      CVE-2017-12617<\/p>\n

        \n
      • Apache Tomcat 9.0.0.M1 \u304b\u3089 9.0.0 \u307e\u3067<\/li>\n
      • Apache Tomcat 8.5.0 \u304b\u3089 8.5.22 \u307e\u3067<\/li>\n
      • Apache Tomcat 8.0.0.RC1 \u304b\u3089 8.0.46 \u307e\u3067<\/li>\n
      • Apache Tomcat 7.0.0 \u304b\u3089 7.0.81 \u307e\u3067<\/li>\n<\/ul>\n<\/div>\n
        \n

        \u8a73\u7d30\u60c5\u5831<\/h2>\n

        The Apache Software Foundation \u304b\u3089\u3001Apache Tomcat \u306b\u95a2\u3059\u308b\u6b21\u306e\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n

          \n
        • \u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067 JSP \u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3055\u308c\u308b (CVE-2017-12615\u3001CVE-2017-12617)<\/li>\n
        • \u60c5\u5831\u6f0f\u3048\u3044 (CVE-2017-12616)<\/li>\n<\/ul>\n<\/div>\n
          \n

          \u60f3\u5b9a\u3055\u308c\u308b\u5f71\u97ff<\/h2>\n

          \u60f3\u5b9a\u3055\u308c\u308b\u5f71\u97ff\u306f\u5404\u8106\u5f31\u6027\u306b\u3088\u308a\u7570\u306a\u308a\u307e\u3059\u304c\u3001\u9060\u9694\u304b\u3089\u306e\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u60c5\u5831\u6f0f\u3048\u3044\u306a\u3069\u306e\u5f71\u97ff\u3092\u53d7\u3051\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/div>\n

          \n

          \u5bfe\u7b56\u65b9\u6cd5<\/h2>\n

          \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3059\u308b<\/strong>
          \n\u958b\u767a\u8005\u304c\u63d0\u4f9b\u3059\u308b\u60c5\u5831\u3092\u3082\u3068\u306b\u3001\u6700\u65b0\u7248\u3078\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3057\u3066\u304f\u3060\u3055\u3044\u3002
          \n\u958b\u767a\u8005\u306f\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306e\u5bfe\u7b56\u7248\u3068\u3057\u3066\u3001\u6b21\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n

            \n
          • Apache Tomcat 9.0.1<\/li>\n
          • Apache Tomcat 8.5.23<\/li>\n
          • Apache Tomcat 8.0.47<\/li>\n
          • Apache Tomcat 7.0.82<\/li>\n<\/ul>\n<\/div>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"

            IPA\u306e\u30b5\u30a4\u30c8\u304b\u3089\u4e0b\u8a18\u5185\u5bb9\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5bfe\u7b56\u60c5\u5831\u304c...<\/p>\n","protected":false},"author":1,"featured_media":1254,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[100],"tags":[101],"class_list":["post-1253","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tomcat","tag-tomcat"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/posts\/1253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/comments?post=1253"}],"version-history":[{"count":3,"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/posts\/1253\/revisions"}],"predecessor-version":[{"id":1257,"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/posts\/1253\/revisions\/1257"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/media\/1254"}],"wp:attachment":[{"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/media?parent=1253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/categories?post=1253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.myu-zin.com\/webridge\/wp-json\/wp\/v2\/tags?post=1253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}