CVE-2016-8735


2023. május 15. 07:58

Apache Software Foundation Tomcat sérülékenysége
Angol cím: Apache Software Foundation Tomcat vulnerability

Publikálás dátuma: 2017.04.06.
Utolsó módosítás dátuma: 2020.10.05.

Leírás

Nem megfelelő hozzáférés-ellenőrzés: A program nem, vagy nem megfelelően korlátozza az erőforrásokhoz való hozzáférést a jogosulatlan felhasználók részére.

Leírás forrása: CWE-284

Elemzés leírás

Eredeti nyelven: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn’t updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.

Elemzés leírás forrása: CVE-2016-8735

Hatás

CVSS3.1 Súlyosság és Metrika

Alap pontszám: 9.8 (Kritikus)
Vektor: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Hatás pontszáma: 5.9
Kihasználhatóság pontszáma: 3.9

Támadás Vektora (AV): Hálózat
Támadás komplexitása (AC): Alacsony
Jogosultság Szükséges (PR): Nincs
Felhasználói Interakció (UI): Nincs
Hatókör (S): Nem változott
Bizalmasság Hatása (C): Magas
Sértetlenség Hatása (I): Magas
Rendelkezésre állás Hatása (A): Magas

Hivatkozások

rhn.redhat.com
seclists.org
svn.apache.org
svn.apache.org
svn.apache.org
svn.apache.org
tomcat.apache.org
tomcat.apache.org
tomcat.apache.org
tomcat.apache.org
www.debian.org
www.oracle.com
www.oracle.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
access.redhat.com
access.redhat.com
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
security.netapp.com
usn.ubuntu.com
www.oracle.com
www.oracle.com

Sérülékeny szoftverek

Apache Software Foundation Tomcat 6.0.0
Apache Software Foundation Tomcat 6.0.1
Apache Software Foundation Tomcat 6.0.2
Apache Software Foundation Tomcat 6.0.3
Apache Software Foundation Tomcat 6.0.4
Apache Software Foundation Tomcat 6.0.5
Apache Software Foundation Tomcat 6.0.6
Apache Software Foundation Tomcat 6.0.7
Apache Software Foundation Tomcat 6.0.8
Apache Software Foundation Tomcat 6.0.9
Apache Software Foundation Tomcat 6.0.10
Apache Software Foundation Tomcat 6.0.11
Apache Software Foundation Tomcat 6.0.12
Apache Software Foundation Tomcat 6.0.13
Apache Software Foundation Tomcat 6.0.14
Apache Software Foundation Tomcat 6.0.15
Apache Software Foundation Tomcat 6.0.16
Apache Software Foundation Tomcat 6.0.17
Apache Software Foundation Tomcat 6.0.18
Apache Software Foundation Tomcat 6.0.19
Apache Software Foundation Tomcat 6.0.20
Apache Software Foundation Tomcat 6.0.21
Apache Software Foundation Tomcat 6.0.22
Apache Software Foundation Tomcat 6.0.23
Apache Software Foundation Tomcat 6.0.24
Apache Software Foundation Tomcat 6.0.25
Apache Software Foundation Tomcat 6.0.26
Apache Software Foundation Tomcat 6.0.27
Apache Software Foundation Tomcat 6.0.28
Apache Software Foundation Tomcat 6.0.29
Apache Software Foundation Tomcat 6.0.30
Apache Software Foundation Tomcat 6.0.31
Apache Software Foundation Tomcat 6.0.32
Apache Software Foundation Tomcat 6.0.33
Apache Software Foundation Tomcat 6.0.34
Apache Software Foundation Tomcat 6.0.35
Apache Software Foundation Tomcat 6.0.36
Apache Software Foundation Tomcat 6.0.37
Apache Software Foundation Tomcat 6.0.38
apache / tomcat 6.0.39
Apache Software Foundation Tomcat 6.0.40
Apache Software Foundation Tomcat 6.0.41
Apache Software Foundation Tomcat 6.0.42
Apache Software Foundation Tomcat 6.0.43
Apache Tomcat 6.0.44
Apache Software Foundation Tomcat 6.0.45
Apache Software Foundation Tomcat 6.0.46
Apache Software Foundation Tomcat 6.0.47
Apache Software Foundation Tomcat 7.0.0
Apache Software Foundation Tomcat 7.0.1
Apache Software Foundation Tomcat 7.0.2
Apache Software Foundation Tomcat 7.0.3
Apache Software Foundation Tomcat 7.0.4
Apache Software Foundation Tomcat 7.0.5
Apache Software Foundation Tomcat 7.0.6
Apache Software Foundation Tomcat 7.0.7
Apache Software Foundation Tomcat 7.0.8
Apache Software Foundation Tomcat 7.0.9
Apache Software Foundation Tomcat 7.0.10
Apache Software Foundation Tomcat 7.0.11
Apache Software Foundation Tomcat 7.0.12
Apache Software Foundation Tomcat 7.0.13
Apache Software Foundation Tomcat 7.0.14
Apache Software Foundation Tomcat 7.0.15
Apache Software Foundation Tomcat 7.0.16
Apache Software Foundation Tomcat 7.0.17
Apache Software Foundation Tomcat 7.0.18
Apache Software Foundation Tomcat 7.0.19
Apache Software Foundation Tomcat 7.0.20
Apache Software Foundation Tomcat 7.0.21
Apache Software Foundation Tomcat 7.0.22
Apache Software Foundation Tomcat 7.0.23
Apache Software Foundation Tomcat 7.0.24
Apache Software Foundation Tomcat 7.0.25
Apache Software Foundation Tomcat 7.0.26
Apache Software Foundation Tomcat 7.0.27
Apache Software Foundation Tomcat 7.0.28
Apache Software Foundation Tomcat 7.0.29
Apache Software Foundation Tomcat 7.0.30
Apache Software Foundation Tomcat 7.0.31
Apache Software Foundation Tomcat 7.0.32
Apache Software Foundation Tomcat 7.0.33
Apache Software Foundation Tomcat 7.0.34
Apache Software Foundation Tomcat 7.0.35
Apache Software Foundation Tomcat 7.0.36
Apache Software Foundation Tomcat 7.0.37
Apache Software Foundation Tomcat 7.0.38
Apache Software Foundation Tomcat 7.0.39
Apache Software Foundation Tomcat 7.0.40
Apache Software Foundation Tomcat 7.0.41
Apache Software Foundation Tomcat 7.0.42
Apache Software Foundation Tomcat 7.0.43
Apache Software Foundation Tomcat 7.0.44
Apache Software Foundation Tomcat 7.0.45
Apache Software Foundation Tomcat 7.0.46
Apache Software Foundation Tomcat 7.0.47
Apache Software Foundation Tomcat 7.0.48
Apache Software Foundation Tomcat 7.0.49
Apache Software Foundation Tomcat 7.0.50
Apache Software Foundation Tomcat 7.0.51
Apache Software Foundation Tomcat 7.0.52
Apache Software Foundation Tomcat 7.0.53
Apache Software Foundation Tomcat 7.0.54
Apache Software Foundation Tomcat 7.0.55
Apache Software Foundation Tomcat 7.0.56
Apache Software Foundation Tomcat 7.0.57
Apache Software Foundation Tomcat 7.0.58
Apache Tomcat 7.0.59
Apache Software Foundation Tomcat 7.0.60
Apache Tomcat 7.0.61
Apache Tomcat 7.0.62
Apache Tomcat 7.0.63
Apache Tomcat 7.0.64
Apache Software Foundation Tomcat 7.0.65
Apache Software Foundation Tomcat 7.0.66
Apache Software Foundation Tomcat 7.0.67
Apache Software Foundation Tomcat 7.0.68
Apache Software Foundation Tomcat 7.0.69
Apache Software Foundation Tomcat 7.0.70
Apache Software Foundation Tomcat 7.0.71
Apache Software Foundation Tomcat 7.0.72
Apache Software Foundation Tomcat Release Candidate 1 8.0.0
Apache Software Foundation Tomcat 8.0.1
Apache Software Foundation Tomcat 8.0.2
Apache Software Foundation Tomcat 8.0.3
Apache Software Foundation Tomcat 8.0.4
Apache Software Foundation Tomcat 8.0.5
Apache Software Foundation Tomcat 8.0.6
Apache Software Foundation Tomcat 8.0.7
Apache Software Foundation Tomcat 8.0.8
Apache Software Foundation Tomcat 8.0.9
Apache Software Foundation Tomcat 8.0.10
Apache Software Foundation Tomcat 8.0.11
Apache Software Foundation Tomcat 8.0.12
Apache Software Foundation Tomcat 8.0.13
Apache Software Foundation Tomcat 8.0.14
Apache Software Foundation Tomcat 8.0.15
Apache Software Foundation Tomcat 8.0.16
Apache Tomcat 8.0.17
Apache Tomcat 8.0.18
Apache Software Foundation Tomcat 8.0.19
Apache Tomcat 8.0.20
Apache Tomcat 8.0.21
Apache Tomcat 8.0.22
Apache Tomcat 8.0.23
Apache Tomcat 8.0.24
Apache Software Foundation Tomcat 8.0.25
Apache Tomcat 8.0.26
Apache Software Foundation Tomcat 8.0.27
Apache Software Foundation Tomcat 8.0.28
Apache Software Foundation Tomcat 8.0.29
Apache Software Foundation Tomcat 8.0.30
Apache Software Foundation Tomcat 8.0.31
Apache Software Foundation Tomcat 8.0.32
Apache Software Foundation Tomcat 8.0.33
Apache Software Foundation Tomcat 8.0.34
Apache Software Foundation Tomcat 8.0.35
Apache Software Foundation Tomcat 8.0.36
Apache Software Foundation Tomcat 8.0.37
Apache Software Foundation Tomcat 8.0.38
Apache Software Foundation Tomcat 8.5.0
Apache Software Foundation Tomcat 8.5.1
Apache Software Foundation Tomcat 8.5.2
Apache Software Foundation Tomcat 8.5.3
Apache Software Foundation Tomcat 8.5.4
Apache Software Foundation Tomcat 8.5.5
Apache Software Foundation Tomcat 8.5.6
Apache Software Foundation Tomcat M1 9.0.0
Apache Software Foundation Tomcat M10 9.0.0
Apache Software Foundation Tomcat M11 9.0.0
Apache Software Foundation Tomcat M2 9.0.0
Apache Software Foundation Tomcat M3 9.0.0
Apache Software Foundation Tomcat M4 9.0.0
Apache Software Foundation Tomcat M5 9.0.0
Apache Software Foundation Tomcat M6 9.0.0
Apache Software Foundation Tomcat M7 9.0.0
Apache Software Foundation Tomcat M8 9.0.0
Apache Software Foundation Tomcat M9 9.0.0

Címkék

Tomcat

Legfrissebb sérülékenységek
CVE-2024-36984 – Splunk sérülékenysége
CVE-2024-36985 – Splunk RCE sérülékenysége
CVE-2024-6387 – sshd sérülékenysége (regreSSHion)
CVE-2024-20399 – Cisco NX-OS sérülékenysége
CVE-2024-2973 – Juniper Networks SSR és Conductor sérülékenysége
CVE-2024-27867 – Apple AirPods és Beats Firmware sérülékenység
CVE-2024-5276 – Fortra FileCatalyst sérülékenység
CVE-2024-5805 – MOVEit Gateway sérülékenység
CVE-2024-5806 – MOVEit Transfer sérülékenység
CVE-2024-28397 – js2py sandbox escape sérülékenység
Tovább a sérülékenységekhez »