İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Orta CVSS 4.3

CVE-2016-0706: Ubuntu Linux: hassas bilgi ifşası

Yayın: · Güncelleme:

Açıklama (NVD)

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.

Özet bilgiler

Ürün
Canonical Ubuntu Linux
CVSS v3.1
4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
%6,11 (yüzdelik 93)
CWE
CWE-200
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
canonical-ubuntu-linux12.0412.04—
canonical-ubuntu-linux14.0414.04—
canonical-ubuntu-linux15.1015.10—
canonical-ubuntu-linux16.0416.04—
debian-debian-linux7.07.0—
debian-debian-linux8.08.0—
apache-tomcat6.0.06.0.0—
apache-tomcat6.0.06.0.0—
apache-tomcat6.0.16.0.1—
apache-tomcat6.0.16.0.1—
apache-tomcat6.0.26.0.2—
apache-tomcat6.0.26.0.2—
apache-tomcat6.0.26.0.2—
apache-tomcat6.0.46.0.4—
apache-tomcat6.0.46.0.4—
apache-tomcat6.0.106.0.10—
apache-tomcat6.0.116.0.11—
apache-tomcat6.0.136.0.13—
apache-tomcat6.0.146.0.14—
apache-tomcat6.0.166.0.16—
apache-tomcat6.0.186.0.18—
apache-tomcat6.0.206.0.20—
apache-tomcat6.0.246.0.24—
apache-tomcat6.0.266.0.26—
apache-tomcat6.0.286.0.28—
apache-tomcat6.0.296.0.29—
apache-tomcat6.0.306.0.30—
apache-tomcat6.0.326.0.32—
apache-tomcat6.0.336.0.33—
apache-tomcat6.0.356.0.35—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları