NetSight
IP …
critical9.1

CVE-2016-5018

Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat

Impact

In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.apache.tomcat:tomcat-jasper>= 9.0.0.M1, <= 9.0.0.M99.0.0.M10
mavenorg.apache.tomcat:jasper>= 6.0.0, <= 6.0.456.0.47
mavenorg.apache.tomcat.embed:tomcat-embed-jasper>= 9.0.0.M1, <= 9.0.0.M99.0.0.M10

Affected products

VendorProductAffected versions
ApacheTomcat
from 6.0.0 through 6.0.45
from 7.0.0 through 7.0.70
from 8.0 through 8.0.36
from 8.5.0 through 8.5.4
Version 9.0.0
NetappOncommand Insight
All versions
NetappOncommand Shift
All versions
NetappSnap Creator Framework
All versions
CanonicalUbuntu Linux
Version 16.04
DebianDebian Linux
Version 8.0
RedhatJboss Enterprise Application Platform
Version 6.4
RedhatJboss Enterprise Web Server
Version 3.0.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.4, 7.6, 7.7

Weakness classification

CWE-288

References