Incorrect Authorization in Apache Tomcat
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-6797US | high7.5OT elevated | — | ||
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application… | ||||
02
references
External citations — patches, advisories, analysis.
- http://rhn.redhat.com/errata/RHSA-2017-0457.htmlWEB
- http://www.debian.org/security/2016/dsa-3720WEB
- https://access.redhat.com/errata/RHSA-2017:0455WEB
- https://access.redhat.com/errata/RHSA-2017:0456WEB
- https://access.redhat.com/errata/RHSA-2017:2247WEB
- https://github.com/apache/tomcatPACKAGE
- https://github.com/apache/tomcat/commit/2859ac3eae132383cb6f3f2042e25d7a4a281b0dWEB
- https://github.com/apache/tomcat/commit/b3406e6c318378cbf440f902f9fdbb8b440aef4eWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan