CVE-2016-8735


május 15. 07:58

Apache Software Foundation Tomcat sérülékenysége
Angol cím: Apache Software Foundation Tomcat vulnerability

Publikálás dátuma: 2017.04.06.
Utolsó módosítás dátuma: 2020.10.05.

Leírás

Nem megfelelő hozzáférés-ellenőrzés: A program nem, vagy nem megfelelően korlátozza az erőforrásokhoz való hozzáférést a jogosulatlan felhasználók részére.

Leírás forrása: CWE-284

Elemzés leírás

Eredeti nyelven: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn’t updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.

Elemzés leírás forrása: CVE-2016-8735

Hatás

CVSS3.1 Súlyosság és Metrika

Alap pontszám: 9.8 (Kritikus)
Vektor: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Hatás pontszáma: 5.9
Kihasználhatóság pontszáma: 3.9

Támadás Vektora (AV): Hálózat
Támadás komplexitása (AC): Alacsony
Jogosultság Szükséges (PR): Nincs
Felhasználói Interakció (UI): Nincs
Hatókör (S): Nem változott
Bizalmasság Hatása (C): Magas
Sértetlenség Hatása (I): Magas
Rendelkezésre állás Hatása (A): Magas

Hivatkozások

rhn.redhat.com
seclists.org
svn.apache.org
svn.apache.org
svn.apache.org
svn.apache.org
tomcat.apache.org
tomcat.apache.org
tomcat.apache.org
tomcat.apache.org
www.debian.org
www.oracle.com
www.oracle.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
access.redhat.com
access.redhat.com
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
lists.apache.org
security.netapp.com
usn.ubuntu.com
www.oracle.com
www.oracle.com

Sérülékeny szoftverek

Apache Software Foundation Tomcat 6.0.0
Apache Software Foundation Tomcat 6.0.1
Apache Software Foundation Tomcat 6.0.2
Apache Software Foundation Tomcat 6.0.3
Apache Software Foundation Tomcat 6.0.4
Apache Software Foundation Tomcat 6.0.5
Apache Software Foundation Tomcat 6.0.6
Apache Software Foundation Tomcat 6.0.7
Apache Software Foundation Tomcat 6.0.8
Apache Software Foundation Tomcat 6.0.9
Apache Software Foundation Tomcat 6.0.10
Apache Software Foundation Tomcat 6.0.11
Apache Software Foundation Tomcat 6.0.12
Apache Software Foundation Tomcat 6.0.13
Apache Software Foundation Tomcat 6.0.14
Apache Software Foundation Tomcat 6.0.15
Apache Software Foundation Tomcat 6.0.16
Apache Software Foundation Tomcat 6.0.17
Apache Software Foundation Tomcat 6.0.18
Apache Software Foundation Tomcat 6.0.19
Apache Software Foundation Tomcat 6.0.20
Apache Software Foundation Tomcat 6.0.21
Apache Software Foundation Tomcat 6.0.22
Apache Software Foundation Tomcat 6.0.23
Apache Software Foundation Tomcat 6.0.24
Apache Software Foundation Tomcat 6.0.25
Apache Software Foundation Tomcat 6.0.26
Apache Software Foundation Tomcat 6.0.27
Apache Software Foundation Tomcat 6.0.28
Apache Software Foundation Tomcat 6.0.29
Apache Software Foundation Tomcat 6.0.30
Apache Software Foundation Tomcat 6.0.31
Apache Software Foundation Tomcat 6.0.32
Apache Software Foundation Tomcat 6.0.33
Apache Software Foundation Tomcat 6.0.34
Apache Software Foundation Tomcat 6.0.35
Apache Software Foundation Tomcat 6.0.36
Apache Software Foundation Tomcat 6.0.37
Apache Software Foundation Tomcat 6.0.38
apache / tomcat 6.0.39
Apache Software Foundation Tomcat 6.0.40
Apache Software Foundation Tomcat 6.0.41
Apache Software Foundation Tomcat 6.0.42
Apache Software Foundation Tomcat 6.0.43
Apache Tomcat 6.0.44
Apache Software Foundation Tomcat 6.0.45
Apache Software Foundation Tomcat 6.0.46
Apache Software Foundation Tomcat 6.0.47
Apache Software Foundation Tomcat 7.0.0
Apache Software Foundation Tomcat 7.0.1
Apache Software Foundation Tomcat 7.0.2
Apache Software Foundation Tomcat 7.0.3
Apache Software Foundation Tomcat 7.0.4
Apache Software Foundation Tomcat 7.0.5
Apache Software Foundation Tomcat 7.0.6
Apache Software Foundation Tomcat 7.0.7
Apache Software Foundation Tomcat 7.0.8
Apache Software Foundation Tomcat 7.0.9
Apache Software Foundation Tomcat 7.0.10
Apache Software Foundation Tomcat 7.0.11
Apache Software Foundation Tomcat 7.0.12
Apache Software Foundation Tomcat 7.0.13
Apache Software Foundation Tomcat 7.0.14
Apache Software Foundation Tomcat 7.0.15
Apache Software Foundation Tomcat 7.0.16
Apache Software Foundation Tomcat 7.0.17
Apache Software Foundation Tomcat 7.0.18
Apache Software Foundation Tomcat 7.0.19
Apache Software Foundation Tomcat 7.0.20
Apache Software Foundation Tomcat 7.0.21
Apache Software Foundation Tomcat 7.0.22
Apache Software Foundation Tomcat 7.0.23
Apache Software Foundation Tomcat 7.0.24
Apache Software Foundation Tomcat 7.0.25
Apache Software Foundation Tomcat 7.0.26
Apache Software Foundation Tomcat 7.0.27
Apache Software Foundation Tomcat 7.0.28
Apache Software Foundation Tomcat 7.0.29
Apache Software Foundation Tomcat 7.0.30
Apache Software Foundation Tomcat 7.0.31
Apache Software Foundation Tomcat 7.0.32
Apache Software Foundation Tomcat 7.0.33
Apache Software Foundation Tomcat 7.0.34
Apache Software Foundation Tomcat 7.0.35
Apache Software Foundation Tomcat 7.0.36
Apache Software Foundation Tomcat 7.0.37
Apache Software Foundation Tomcat 7.0.38
Apache Software Foundation Tomcat 7.0.39
Apache Software Foundation Tomcat 7.0.40
Apache Software Foundation Tomcat 7.0.41
Apache Software Foundation Tomcat 7.0.42
Apache Software Foundation Tomcat 7.0.43
Apache Software Foundation Tomcat 7.0.44
Apache Software Foundation Tomcat 7.0.45
Apache Software Foundation Tomcat 7.0.46
Apache Software Foundation Tomcat 7.0.47
Apache Software Foundation Tomcat 7.0.48
Apache Software Foundation Tomcat 7.0.49
Apache Software Foundation Tomcat 7.0.50
Apache Software Foundation Tomcat 7.0.51
Apache Software Foundation Tomcat 7.0.52
Apache Software Foundation Tomcat 7.0.53
Apache Software Foundation Tomcat 7.0.54
Apache Software Foundation Tomcat 7.0.55
Apache Software Foundation Tomcat 7.0.56
Apache Software Foundation Tomcat 7.0.57
Apache Software Foundation Tomcat 7.0.58
Apache Tomcat 7.0.59
Apache Software Foundation Tomcat 7.0.60
Apache Tomcat 7.0.61
Apache Tomcat 7.0.62
Apache Tomcat 7.0.63
Apache Tomcat 7.0.64
Apache Software Foundation Tomcat 7.0.65
Apache Software Foundation Tomcat 7.0.66
Apache Software Foundation Tomcat 7.0.67
Apache Software Foundation Tomcat 7.0.68
Apache Software Foundation Tomcat 7.0.69
Apache Software Foundation Tomcat 7.0.70
Apache Software Foundation Tomcat 7.0.71
Apache Software Foundation Tomcat 7.0.72
Apache Software Foundation Tomcat Release Candidate 1 8.0.0
Apache Software Foundation Tomcat 8.0.1
Apache Software Foundation Tomcat 8.0.2
Apache Software Foundation Tomcat 8.0.3
Apache Software Foundation Tomcat 8.0.4
Apache Software Foundation Tomcat 8.0.5
Apache Software Foundation Tomcat 8.0.6
Apache Software Foundation Tomcat 8.0.7
Apache Software Foundation Tomcat 8.0.8
Apache Software Foundation Tomcat 8.0.9
Apache Software Foundation Tomcat 8.0.10
Apache Software Foundation Tomcat 8.0.11
Apache Software Foundation Tomcat 8.0.12
Apache Software Foundation Tomcat 8.0.13
Apache Software Foundation Tomcat 8.0.14
Apache Software Foundation Tomcat 8.0.15
Apache Software Foundation Tomcat 8.0.16
Apache Tomcat 8.0.17
Apache Tomcat 8.0.18
Apache Software Foundation Tomcat 8.0.19
Apache Tomcat 8.0.20
Apache Tomcat 8.0.21
Apache Tomcat 8.0.22
Apache Tomcat 8.0.23
Apache Tomcat 8.0.24
Apache Software Foundation Tomcat 8.0.25
Apache Tomcat 8.0.26
Apache Software Foundation Tomcat 8.0.27
Apache Software Foundation Tomcat 8.0.28
Apache Software Foundation Tomcat 8.0.29
Apache Software Foundation Tomcat 8.0.30
Apache Software Foundation Tomcat 8.0.31
Apache Software Foundation Tomcat 8.0.32
Apache Software Foundation Tomcat 8.0.33
Apache Software Foundation Tomcat 8.0.34
Apache Software Foundation Tomcat 8.0.35
Apache Software Foundation Tomcat 8.0.36
Apache Software Foundation Tomcat 8.0.37
Apache Software Foundation Tomcat 8.0.38
Apache Software Foundation Tomcat 8.5.0
Apache Software Foundation Tomcat 8.5.1
Apache Software Foundation Tomcat 8.5.2
Apache Software Foundation Tomcat 8.5.3
Apache Software Foundation Tomcat 8.5.4
Apache Software Foundation Tomcat 8.5.5
Apache Software Foundation Tomcat 8.5.6
Apache Software Foundation Tomcat M1 9.0.0
Apache Software Foundation Tomcat M10 9.0.0
Apache Software Foundation Tomcat M11 9.0.0
Apache Software Foundation Tomcat M2 9.0.0
Apache Software Foundation Tomcat M3 9.0.0
Apache Software Foundation Tomcat M4 9.0.0
Apache Software Foundation Tomcat M5 9.0.0
Apache Software Foundation Tomcat M6 9.0.0
Apache Software Foundation Tomcat M7 9.0.0
Apache Software Foundation Tomcat M8 9.0.0
Apache Software Foundation Tomcat M9 9.0.0

Címkék

Tomcat

Legfrissebb sérülékenységek
CVE-2023-33175 – Python ToUI modul sérülékenysége
CVE-2023-2868 – Barracuda Email Security Gateway sérülékenysége
CVE-2023-1424 – Mitsubishi Electric Corporation MELSEC iQ-F szériájú CPU sérülékenysége
CVE-2023-27068 – Sitecore Experience Platform sérülékenysége
CVE-2023-33236 – MXsecurity sérülékenysége
CVE-2020-36694 – Linux Kernel sérülékenysége
CVE-2023-33250 – Linux Kernel Release Candidate 1 sérülékenysége
CVE-2023-2706 – OTP Login Woocommerce & Gravity Forms WordPress bővítmény sérülékenysége
CVE-2023-2499 – WordPress RegistrationMagic beépülő modul sérülékenysége
CVE-2023-32314 – vm2 sandbox sérülékenysége
Tovább a sérülékenységekhez »