CVE-2016-6796

Published: Aug 11, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.

Affected (34)

Products: Apache: Tomcat · Debian: Debian Linux · Netapp: Oncommand Insight, Oncommand Shift, Snap Creator Framework · +3 more

Show all products

1 product

1 product

3 products

Snap Creator Framework

Canonical

1 product

Ubuntu Linux

Oracle

1 product

Tekelec Platform Distribution

Redhat

8 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Jboss Enterprise Application Platform

Jboss Enterprise Web Server

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Apache Tomcat	From 6.0.0 to 6.0.45
Apache Tomcat	From 7.0.0 to 7.0.70
Apache Tomcat	From 8.0 to 8.0.36
Apache Tomcat	From 8.5.0 to 8.5.4
Apache Tomcat	Version 9.0.0 milestone1
Apache Tomcat	Version 9.0.0 milestone2
Apache Tomcat	Version 9.0.0 milestone3
Apache Tomcat	Version 9.0.0 milestone4
Apache Tomcat	Version 9.0.0 milestone5
Apache Tomcat	Version 9.0.0 milestone6
Apache Tomcat	Version 9.0.0 milestone7
Apache Tomcat	Version 9.0.0 milestone8
Apache Tomcat	Version 9.0.0 milestone9

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Shift	All versions
Netapp Snap Creator Framework	All versions

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Tekelec Platform Distribution	Version 7.4.0
Oracle Tekelec Platform Distribution	Version 7.7.1

Configuration F

14 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Jboss Enterprise Application Platform	Version 6.4
Redhat Jboss Enterprise Web Server	Version 3.0.0

References (62)

http://rhn.redhat.com/errata/RHSA-2017-0457.html

Source: security@apache.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-1551.html

Source: security@apache.org

Third Party Advisory

http://www.debian.org/security/2016/dsa-3720

Source: security@apache.org

Third Party Advisory

http://www.securityfocus.com/bid/93944

Source: security@apache.org

Broken Link

http://www.securitytracker.com/id/1037141

Source: security@apache.org

Broken Link

http://www.securitytracker.com/id/1038757

Source: security@apache.org

Broken Link

https://access.redhat.com/errata/RHSA-2017:0455

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:0456

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1548

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1549

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1550

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:1552

Source: security@apache.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2247

Source: security@apache.org

Third Party Advisory

https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/5a2105a56b2495ab70fa568f06925bd861f0d71ffab4fb38bb4fdc45%40%3Cannounce.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E

Source: security@apache.org

https://security.netapp.com/advisory/ntap-20180605-0001/

Source: security@apache.org

Third Party Advisory

https://usn.ubuntu.com/4557-1/

Source: security@apache.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html

Source: security@apache.org

PatchThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0457.html