PT-2015-3927 · Apache+4 · Apache Tomcat+4

Published 2015-01-16 · Updated 2022-05-14 · CVE-2014-7810

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.x through 6.0.43 Apache Tomcat versions 7.x through 7.0.57 Apache Tomcat versions 8.x through 8.0.15

Description The issue allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during Expression Language (EL) evaluation. Malicious web applications could use expression language to bypass the protections of a Security Manager as expressions were evaluated within a privileged code section.

Recommendations For Apache Tomcat versions 6.x through 6.0.43, update to version 6.0.44 or later. For Apache Tomcat versions 7.x through 7.0.57, update to version 7.0.58 or later. For Apache Tomcat versions 8.x through 8.0.15, update to version 8.0.16 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CESA-2016_0492

CESA-2016_2046

CVE-2014-7810

DLA-232-1

DSA-3428-1

DSA-3447-1

DSA-3530-1

GHSA-4C43-CWVX-9CRH

RHSA-2015:1622

RHSA-2016:0492

RHSA-2016:2046

RHSA-2016_0492

RHSA-2016_2046

SUSE-SU-2015:1281-1

SUSE-SU-2015:1565-1

SUSE-SU-2015_1281-1

USN-2654-1

USN-2655-1

Affected Products

Apache Tomcat

Centos

Red Hat

Suse

Ubuntu

References · 138

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/tomcat_rhel_based_temp_priv_esc.rb · Exploit
• http://debian.org/security/2016/dsa-3530 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/tomcat7 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00612 · Security Note
• http://rhn.redhat.com/errata/RHSA-2016-0492.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0227 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00410 · Security Note
• https://security-tracker.debian.org/tracker/source-package/tomcat6 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5346 · Security Note
• http://svn.apache.org/viewvc?view=revision&revision=1645642 · Patch
• https://osv.dev/vulnerability/GHSA-4c43-cwvx-9crh · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2655-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-2655-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00615 · Security Note
• http://svn.apache.org/viewvc?view=revision&revision=1644018 · Patch