Количество 12
Количество 12
GHSA-mv42-px54-87jw
Improper Access Control in Apache Tomcat
CVE-2016-0714
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
CVE-2016-0714
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
CVE-2016-0714
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
CVE-2016-0714
The session-persistence implementation in Apache Tomcat 6.x before 6.0 ...
BDU:2016-00615
Уязвимость сервера приложений Apache Tomcat, позволяющая нарушителю выполнить произвольный код в привилегированном контексте
SUSE-SU-2016:0839-1
Security update for tomcat6
ELSA-2016-2045
ELSA-2016-2045: tomcat6 security and bug fix update (IMPORTANT)
openSUSE-SU-2016:0865-1
Security update for tomcat
SUSE-SU-2016:0822-1
Security update for tomcat
SUSE-SU-2016:0769-1
Security update for tomcat
ELSA-2016-2599
ELSA-2016-2599: tomcat security, bug fix, and enhancement update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-mv42-px54-87jw Improper Access Control in Apache Tomcat | CVSS3: 8.8 | 10% Средний | больше 3 лет назад |
 | CVE-2016-0714 The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session. | CVSS3: 8.8 | 10% Средний | больше 9 лет назад |
 | CVE-2016-0714 The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session. | CVSS3: 8.8 | 10% Средний | больше 9 лет назад |
 | CVE-2016-0714 The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session. | CVSS3: 8.8 | 10% Средний | больше 9 лет назад |
| CVE-2016-0714 The session-persistence implementation in Apache Tomcat 6.x before 6.0 ... | CVSS3: 8.8 | 10% Средний | больше 9 лет назад |
 | BDU:2016-00615 Уязвимость сервера приложений Apache Tomcat, позволяющая нарушителю выполнить произвольный код в привилегированном контексте | CVSS2: 6.5 | 10% Средний | больше 9 лет назад |
 | SUSE-SU-2016:0839-1 Security update for tomcat6 | больше 9 лет назад | ||
| ELSA-2016-2045 ELSA-2016-2045: tomcat6 security and bug fix update (IMPORTANT) | около 9 лет назад | ||
| openSUSE-SU-2016:0865-1 Security update for tomcat | больше 9 лет назад | ||
| SUSE-SU-2016:0822-1 Security update for tomcat | больше 9 лет назад | ||
| SUSE-SU-2016:0769-1 Security update for tomcat | больше 9 лет назад | ||
| ELSA-2016-2599 ELSA-2016-2599: tomcat security, bug fix, and enhancement update (MODERATE) | около 9 лет назад |
Уязвимостей на страницу