PT-2016-1315 · Apache+5 · Apache Tomcat+5

Mark Koek · Published 2016-02-08 · Updated 2024-06-15 · CVE-2016-0706

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.x through 6.0.44 Apache Tomcat versions 7.x through 7.0.67 Apache Tomcat versions 8.x through 8.0.30 Apache Tomcat versions 9.x through 9.0.0.M1

Description The issue is related to the lack of protection for internal data in the Apache Tomcat server, allowing a remote attacker to bypass access restrictions and read arbitrary HTTP requests using a specially crafted web application. This could expose sensitive information, such as session IDs, from other web applications. The issue only affects users running untrusted web applications under a security manager.

Recommendations For Apache Tomcat versions 6.x through 6.0.44, update to version 6.0.45 or later. For Apache Tomcat versions 7.x through 7.0.67, update to version 7.0.68 or later. For Apache Tomcat versions 8.x through 8.0.30, update to version 8.0.31 or later. For Apache Tomcat versions 9.x through 9.0.0.M1, update to version 9.0.0.M2 or later. As a temporary workaround, consider restricting access to the org.apache.catalina.manager.StatusManagerServlet to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2016-1193

BDU:2016-00614

CESA-2016_2045

CESA-2016_2599

CVE-2016-0706

DLA-435-1

DSA-3530-1

DSA-3552-1

DSA-3609-1

GHSA-6VX3-HR43-CFRH

MGASA-2016-0090

OPENSUSE-SU-2016_0865-1

OPENSUSE-SU-2024:10446-1

OPENSUSE-SU-2024:13441-1

RHSA-2016:1087

RHSA-2016:1088

RHSA-2016:2045

RHSA-2016:2599

RHSA-2016:2807

RHSA-2016_2045

RHSA-2016_2599

SUSE-SU-2016:0769-1

SUSE-SU-2016:0822-1

SUSE-SU-2016:0839-1

USN-3024-1

Affected Products

Alt Linux

Apache Tomcat

Centos

Red Hat

Suse

Ubuntu

References · 154

• https://osv.dev/vulnerability/CVE-2016-0706 · Vendor Advisory
• http://tomcat.apache.org/security-6.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html · Vendor Advisory
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3024-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2808.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2016:1087 · Vendor Advisory
• http://debian.org/security/2016/dsa-3552 · Vendor Advisory
• http://tomcat.apache.org/security-7.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2045.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-5345 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-0706 · Security Note
• http://tomcat.apache.org/security-8.html · Vendor Advisory
• http://tomcat.apache.org/security-9.html · Vendor Advisory
• http://debian.org/security/2016/dsa-3530 · Vendor Advisory