Количество 12
Количество 12
GHSA-mv42-px54-87jw
Improper Access Control in Apache Tomcat
CVE-2016-0714
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
CVE-2016-0714
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
CVE-2016-0714
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
CVE-2016-0714
The session-persistence implementation in Apache Tomcat 6.x before 6.0 ...
BDU:2016-00615
Уязвимость сервера приложений Apache Tomcat, позволяющая нарушителю выполнить произвольный код в привилегированном контексте
SUSE-SU-2016:0839-1
Security update for tomcat6
ELSA-2016-2045
ELSA-2016-2045: tomcat6 security and bug fix update (IMPORTANT)
openSUSE-SU-2016:0865-1
Security update for tomcat
SUSE-SU-2016:0822-1
Security update for tomcat
SUSE-SU-2016:0769-1
Security update for tomcat
ELSA-2016-2599
ELSA-2016-2599: tomcat security, bug fix, and enhancement update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-mv42-px54-87jw Improper Access Control in Apache Tomcat | CVSS3: 8.8 | 8% Низкий | больше 3 лет назад |
 | CVE-2016-0714 The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session. | CVSS3: 8.8 | 8% Низкий | почти 10 лет назад |
 | CVE-2016-0714 The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session. | CVSS3: 8.8 | 8% Низкий | почти 10 лет назад |
 | CVE-2016-0714 The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session. | CVSS3: 8.8 | 8% Низкий | почти 10 лет назад |
| CVE-2016-0714 The session-persistence implementation in Apache Tomcat 6.x before 6.0 ... | CVSS3: 8.8 | 8% Низкий | почти 10 лет назад |
 | BDU:2016-00615 Уязвимость сервера приложений Apache Tomcat, позволяющая нарушителю выполнить произвольный код в привилегированном контексте | CVSS2: 6.5 | 8% Низкий | почти 10 лет назад |
 | SUSE-SU-2016:0839-1 Security update for tomcat6 | почти 10 лет назад | ||
| ELSA-2016-2045 ELSA-2016-2045: tomcat6 security and bug fix update (IMPORTANT) | больше 9 лет назад | ||
| openSUSE-SU-2016:0865-1 Security update for tomcat | почти 10 лет назад | ||
| SUSE-SU-2016:0822-1 Security update for tomcat | почти 10 лет назад | ||
| SUSE-SU-2016:0769-1 Security update for tomcat | почти 10 лет назад | ||
| ELSA-2016-2599 ELSA-2016-2599: tomcat security, bug fix, and enhancement update (MODERATE) | около 9 лет назад |
Уязвимостей на страницу