CVE-2016-6796

Severity

4.2

Description

A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.

Mitigation

We recommend upgrading to a version of this component that is not vulnerable to this specific issue.

Related links:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6796

http://seclists.org/oss-sec/2016/q4/261

http://www.securityfocus.com/bid/93944/discuss

Project

Apache Tomcat

Category

Sandbox escape

Tags

data

Date Disclosed

2016-10-27

Date Discovered

2016-08-12

Apache Tomcat 8.5.x

First release:

2016-06-13

CVEs:

66

Support Lifecycle:

Maintenance Support

Namespace:

javax

8.5.0 8.5.2 8.5.3 8.5.4

Apache Tomcat 8.0.x

First release:

2014-06-25

First release:

2018-06-30

CVEs:

55

Support Lifecycle:

Namespace:

javax

8.0.1 8.0.3 8.0.5 8.0.8 8.0.9 8.0.11 8.0.12 8.0.14 8.0.15 8.0.17 8.0.18 8.0.20 8.0.21 8.0.22 8.0.23 8.0.24 8.0.26 8.0.27 8.0.28 8.0.29 8.0.30 8.0.32 8.0.33 8.0.35 8.0.36

Apache TomEE 7.0.x

First release:

2016-05-17

CVEs:

111

Support Lifecycle:

Maintenance Support

Namespace:

javax

Apache TomEE 1.7.x

First release:

2014-08-09

CVEs:

95

Support Lifecycle:

Namespace:

javax

1.7.0 1.7.1 1.7.2 1.7.3 1.7.4

Apache TomEE 1.6.x

First release:

2013-11-17

CVEs:

108

Support Lifecycle:

Namespace:

javax

1.6.0 1.6.0.1 1.6.0.2

Apache TomEE 1.5.x

First release:

2012-09-28

CVEs:

119

Support Lifecycle:

Namespace:

javax

1.5.0 1.5.1 1.5.2

Apache TomEE 1.0.x

First release:

2012-04-27

CVEs:

130

Support Lifecycle:

Namespace:

javax

Feel Vulnerable?

Contact us so we can help you.

First name ^*
Last name ^*
Email ^*
Company ^*
Product ^*
Heard about us from: ^*
Tell us more ^*

Send me a confirmation email

^* These fields are required.