CVE:CVE-2018-8014
CNNVD:CNNVD-201805-475
Apache Tomcat是美国阿帕奇（Apache）软件基金会下属的Jakarta项目的一款轻量级Web应用服务器，它主要用于开发和调试JSP程序，适用于中小型系统。CORS Filter是其中的一个提供跨源资源共享功能的组件。
Apache Tomcat中存在安全漏洞，该漏洞源于不安全的CORS过滤器默认设置。远程攻击者可利用该漏洞对系统发起攻击。以下版本受到影响：Apache Tomcat 9.0.0.M1版本至9.0.8版本，8.5.0版本至8.5.31版本，8.0.0.RC1版本至8.0.52版本，7.0.41版本至7.0.88版本。
solution:Upgrade apache tomcat to a higher version than 7.0.88,8.0.52,8.5.31,9.0.8,8.0.0:rc1,9.0.0:m1,and avoid the version [7.0.41,7.0.88],[8.0.0,8.0.52],[8.5.0,8.5.31],[9.0.0,9.0.8],8.0.0:rc1,9.0.0:m1; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade netapp oncommand_insight to a higher version than -; netapp oncommand_unified_manager avoid the version [9.4,),[7.3,),no fixed version after 9.4,no fixed version after 7.3; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapcenter_server to a higher version than -; Upgrade netapp storage_automation_store to a higher version than -