CVE-2016-0706 | Mend Vulnerability Database

Vulnerability DatabaseCVE-2016-0706

CVE-2016-0706

February 25, 2016

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.

Related Resources (58)

https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E

http://www.debian.org/security/2016/dsa-3530

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E

https://security.netapp.com/advisory/ntap-20180531-0001/

http://www.ubuntu.com/usn/USN-3024-1

https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442

https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E

http://www.debian.org/security/2016/dsa-3609

https://bto.bluecoat.com/security-advisory/sa118

https://security.netapp.com/advisory/ntap-20180531-0001

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E

http://svn.apache.org/viewvc?view=revision&revision=1722801

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E

http://tomcat.apache.org/security-8.html

https://access.redhat.com/errata/RHSA-2016:1088

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E

https://security.gentoo.org/glsa/201705-09

http://www.securityfocus.com/bid/83324

https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E

http://seclists.org/bugtraq/2016/Feb/144

http://svn.apache.org/viewvc?view=revision&revision=1722800

http://www.debian.org/security/2016/dsa-3552

https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html

http://rhn.redhat.com/errata/RHSA-2016-2807.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

https://access.redhat.com/errata/RHSA-2016:1087

http://tomcat.apache.org/security-9.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html

https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E

http://www.securitytracker.com/id/1035069

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964

https://access.redhat.com/security/cve/CVE-2016-0706

http://rhn.redhat.com/errata/RHSA-2016-2599.html

https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E

http://svn.apache.org/viewvc?view=revision&revision=1722802

https://github.com/apache/tomcat

https://web.archive.org/web/20160321234551/http://www.securitytracker.com/id/1035069

http://tomcat.apache.org/security-6.html

http://marc.info/?l=bugtraq&m=145974991225029&w=2

https://nvd.nist.gov/vuln/detail/CVE-2016-0706

http://rhn.redhat.com/errata/RHSA-2016-2808.html

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626

http://tomcat.apache.org/security-7.html

http://rhn.redhat.com/errata/RHSA-2016-1089.html

https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E

http://svn.apache.org/viewvc?view=revision&revision=1722799

https://web.archive.org/web/20160226210040/http://www.securityfocus.com/bid/83324

http://rhn.redhat.com/errata/RHSA-2016-2045.html

Do you need more information?

CVSS v4

Base Score:

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

LOW

User Interaction

NONE

Vulnerable System Confidentiality

LOW

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

CVSS v2

Base Score:

4

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

Weakness Type (CWE)

Exposure of Sensitive Information to an Unauthorized Actor

EPSS

Base Score:

0.71