Apache Software Foundation Tomcat sérülékenysége
Angol cím: Apache Software Foundation Tomcat vulnerability
Publikálás dátuma: 2017.04.06.
Utolsó módosítás dátuma: 2020.10.05.
Leírás
Nem megfelelő hozzáférés-ellenőrzés: A program nem, vagy nem megfelelően korlátozza az erőforrásokhoz való hozzáférést a jogosulatlan felhasználók részére.
Leírás forrása: CWE-284Elemzés leírás
Eredeti nyelven: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn’t updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.
Elemzés leírás forrása: CVE-2016-8735Hatás
CVSS3.1 Súlyosság és Metrika
Base score: 9.8 (Kritikus)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 3.9
Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality Impact (C): High
Integrity Impact (I): High
Availability Impact (A): High
Hivatkozások
rhn.redhat.com
seclists.org
svn.apache.org
svn.apache.org
svn.apache.org
svn.apache.org
tomcat.apache.org
tomcat.apache.org
tomcat.apache.org
tomcat.apache.org
www.debian.org
www.oracle.com
www.oracle.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
access.redhat.com
access.redhat.com
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
security.netapp.com
usn.ubuntu.com
www.oracle.com
www.oracle.com
Sérülékeny szoftverek
Apache Software Foundation Tomcat 6.0.0
Apache Software Foundation Tomcat 6.0.1
Apache Software Foundation Tomcat 6.0.2
Apache Software Foundation Tomcat 6.0.3
Apache Software Foundation Tomcat 6.0.4
Apache Software Foundation Tomcat 6.0.5
Apache Software Foundation Tomcat 6.0.6
Apache Software Foundation Tomcat 6.0.7
Apache Software Foundation Tomcat 6.0.8
Apache Software Foundation Tomcat 6.0.9
Apache Software Foundation Tomcat 6.0.10
Apache Software Foundation Tomcat 6.0.11
Apache Software Foundation Tomcat 6.0.12
Apache Software Foundation Tomcat 6.0.13
Apache Software Foundation Tomcat 6.0.14
Apache Software Foundation Tomcat 6.0.15
Apache Software Foundation Tomcat 6.0.16
Apache Software Foundation Tomcat 6.0.17
Apache Software Foundation Tomcat 6.0.18
Apache Software Foundation Tomcat 6.0.19
Apache Software Foundation Tomcat 6.0.20
Apache Software Foundation Tomcat 6.0.21
Apache Software Foundation Tomcat 6.0.22
Apache Software Foundation Tomcat 6.0.23
Apache Software Foundation Tomcat 6.0.24
Apache Software Foundation Tomcat 6.0.25
Apache Software Foundation Tomcat 6.0.26
Apache Software Foundation Tomcat 6.0.27
Apache Software Foundation Tomcat 6.0.28
Apache Software Foundation Tomcat 6.0.29
Apache Software Foundation Tomcat 6.0.30
Apache Software Foundation Tomcat 6.0.31
Apache Software Foundation Tomcat 6.0.32
Apache Software Foundation Tomcat 6.0.33
Apache Software Foundation Tomcat 6.0.34
Apache Software Foundation Tomcat 6.0.35
Apache Software Foundation Tomcat 6.0.36
Apache Software Foundation Tomcat 6.0.37
Apache Software Foundation Tomcat 6.0.38
apache / tomcat 6.0.39
Apache Software Foundation Tomcat 6.0.40
Apache Software Foundation Tomcat 6.0.41
Apache Software Foundation Tomcat 6.0.42
Apache Software Foundation Tomcat 6.0.43
Apache Tomcat 6.0.44
Apache Software Foundation Tomcat 6.0.45
Apache Software Foundation Tomcat 6.0.46
Apache Software Foundation Tomcat 6.0.47
Apache Software Foundation Tomcat 7.0.0
Apache Software Foundation Tomcat 7.0.1
Apache Software Foundation Tomcat 7.0.2
Apache Software Foundation Tomcat 7.0.3
Apache Software Foundation Tomcat 7.0.4
Apache Software Foundation Tomcat 7.0.5
Apache Software Foundation Tomcat 7.0.6
Apache Software Foundation Tomcat 7.0.7
Apache Software Foundation Tomcat 7.0.8
Apache Software Foundation Tomcat 7.0.9
Apache Software Foundation Tomcat 7.0.10
Apache Software Foundation Tomcat 7.0.11
Apache Software Foundation Tomcat 7.0.12
Apache Software Foundation Tomcat 7.0.13
Apache Software Foundation Tomcat 7.0.14
Apache Software Foundation Tomcat 7.0.15
Apache Software Foundation Tomcat 7.0.16
Apache Software Foundation Tomcat 7.0.17
Apache Software Foundation Tomcat 7.0.18
Apache Software Foundation Tomcat 7.0.19
Apache Software Foundation Tomcat 7.0.20
Apache Software Foundation Tomcat 7.0.21
Apache Software Foundation Tomcat 7.0.22
Apache Software Foundation Tomcat 7.0.23
Apache Software Foundation Tomcat 7.0.24
Apache Software Foundation Tomcat 7.0.25
Apache Software Foundation Tomcat 7.0.26
Apache Software Foundation Tomcat 7.0.27
Apache Software Foundation Tomcat 7.0.28
Apache Software Foundation Tomcat 7.0.29
Apache Software Foundation Tomcat 7.0.30
Apache Software Foundation Tomcat 7.0.31
Apache Software Foundation Tomcat 7.0.32
Apache Software Foundation Tomcat 7.0.33
Apache Software Foundation Tomcat 7.0.34
Apache Software Foundation Tomcat 7.0.35
Apache Software Foundation Tomcat 7.0.36
Apache Software Foundation Tomcat 7.0.37
Apache Software Foundation Tomcat 7.0.38
Apache Software Foundation Tomcat 7.0.39
Apache Software Foundation Tomcat 7.0.40
Apache Software Foundation Tomcat 7.0.41
Apache Software Foundation Tomcat 7.0.42
Apache Software Foundation Tomcat 7.0.43
Apache Software Foundation Tomcat 7.0.44
Apache Software Foundation Tomcat 7.0.45
Apache Software Foundation Tomcat 7.0.46
Apache Software Foundation Tomcat 7.0.47
Apache Software Foundation Tomcat 7.0.48
Apache Software Foundation Tomcat 7.0.49
Apache Software Foundation Tomcat 7.0.50
Apache Software Foundation Tomcat 7.0.51
Apache Software Foundation Tomcat 7.0.52
Apache Software Foundation Tomcat 7.0.53
Apache Software Foundation Tomcat 7.0.54
Apache Software Foundation Tomcat 7.0.55
Apache Software Foundation Tomcat 7.0.56
Apache Software Foundation Tomcat 7.0.57
Apache Software Foundation Tomcat 7.0.58
Apache Tomcat 7.0.59
Apache Software Foundation Tomcat 7.0.60
Apache Tomcat 7.0.61
Apache Tomcat 7.0.62
Apache Tomcat 7.0.63
Apache Tomcat 7.0.64
Apache Software Foundation Tomcat 7.0.65
Apache Software Foundation Tomcat 7.0.66
Apache Software Foundation Tomcat 7.0.67
Apache Software Foundation Tomcat 7.0.68
Apache Software Foundation Tomcat 7.0.69
Apache Software Foundation Tomcat 7.0.70
Apache Software Foundation Tomcat 7.0.71
Apache Software Foundation Tomcat 7.0.72
Apache Software Foundation Tomcat Release Candidate 1 8.0.0
Apache Software Foundation Tomcat 8.0.1
Apache Software Foundation Tomcat 8.0.2
Apache Software Foundation Tomcat 8.0.3
Apache Software Foundation Tomcat 8.0.4
Apache Software Foundation Tomcat 8.0.5
Apache Software Foundation Tomcat 8.0.6
Apache Software Foundation Tomcat 8.0.7
Apache Software Foundation Tomcat 8.0.8
Apache Software Foundation Tomcat 8.0.9
Apache Software Foundation Tomcat 8.0.10
Apache Software Foundation Tomcat 8.0.11
Apache Software Foundation Tomcat 8.0.12
Apache Software Foundation Tomcat 8.0.13
Apache Software Foundation Tomcat 8.0.14
Apache Software Foundation Tomcat 8.0.15
Apache Software Foundation Tomcat 8.0.16
Apache Tomcat 8.0.17
Apache Tomcat 8.0.18
Apache Software Foundation Tomcat 8.0.19
Apache Tomcat 8.0.20
Apache Tomcat 8.0.21
Apache Tomcat 8.0.22
Apache Tomcat 8.0.23
Apache Tomcat 8.0.24
Apache Software Foundation Tomcat 8.0.25
Apache Tomcat 8.0.26
Apache Software Foundation Tomcat 8.0.27
Apache Software Foundation Tomcat 8.0.28
Apache Software Foundation Tomcat 8.0.29
Apache Software Foundation Tomcat 8.0.30
Apache Software Foundation Tomcat 8.0.31
Apache Software Foundation Tomcat 8.0.32
Apache Software Foundation Tomcat 8.0.33
Apache Software Foundation Tomcat 8.0.34
Apache Software Foundation Tomcat 8.0.35
Apache Software Foundation Tomcat 8.0.36
Apache Software Foundation Tomcat 8.0.37
Apache Software Foundation Tomcat 8.0.38
Apache Software Foundation Tomcat 8.5.0
Apache Software Foundation Tomcat 8.5.1
Apache Software Foundation Tomcat 8.5.2
Apache Software Foundation Tomcat 8.5.3
Apache Software Foundation Tomcat 8.5.4
Apache Software Foundation Tomcat 8.5.5
Apache Software Foundation Tomcat 8.5.6
Apache Software Foundation Tomcat M1 9.0.0
Apache Software Foundation Tomcat M10 9.0.0
Apache Software Foundation Tomcat M11 9.0.0
Apache Software Foundation Tomcat M2 9.0.0
Apache Software Foundation Tomcat M3 9.0.0
Apache Software Foundation Tomcat M4 9.0.0
Apache Software Foundation Tomcat M5 9.0.0
Apache Software Foundation Tomcat M6 9.0.0
Apache Software Foundation Tomcat M7 9.0.0
Apache Software Foundation Tomcat M8 9.0.0
Apache Software Foundation Tomcat M9 9.0.0