Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-0706US | medium4.3 | — | ||
Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/cat… | ||||
02
references
External citations — patches, advisories, analysis.
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.htmlWEB
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.htmlWEB
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.htmlWEB
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.htmlWEB
- http://marc.info/?l=bugtraq&m=145974991225029&w=2WEB
- http://rhn.redhat.com/errata/RHSA-2016-1089.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2016-2045.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2016-2599.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan