Lucene search
Veracode Vulnerability DatabaseVERACODE:3842HistoryApr 05, 2017 - 3:21 a.m.
Security Manager Bypass
2017-04-0503:21:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.002 Low
EPSS
Percentile
55.9%
web-naming is vulnerable to denial of service via security manager bypass. The ResourceLinkFactory.setGlobalContext() method was accessibly under a security manager without any checks. This allowed a malicious web application to injection a global context that could be used to disrupt other web applications or access data owned by other web applications. This issue is related to CVE-2016-0763.
References
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
www.securityfocus.com/bid/101360
www.securitytracker.com/id/1039606
github.com/Payara/Payara/commit/cfe65208dc603e6bbab154ee1b086407d964d2b2
github.com/payara/Payara/pull/1210
www.sourceclear.com/blog/How-we-found-exploitable-zero-days-in-the-open-source-GlassFish-server-with-the-Security-Graph-Language/
Related
nvd
nvd
CVE-2017-10385
2017-10-19 17:29:05
CVE-2016-0763
2016-02-25 01:59:06
cvelist
cvelist
CVE-2017-10385
2017-10-19 17:00:00
CVE-2016-0763
2016-02-25 01:00:00
cve
cve
CVE-2017-10385
2017-10-19 17:29:05
CVE-2016-0763
2016-02-25 01:59:06
debiancve
debiancve
CVE-2017-10385
2017-10-19 17:29:00
CVE-2016-0763
2016-02-25 01:59:06
prion
prion
Buffer overflow
2017-10-19 17:29:00
Design/Logic Flaw
2016-02-25 01:59:00
github
github
Improper Verification of Source of a Communication Channel in Apache Tomcat
2022-05-14 01:18:35
nessus
nessus
Fedora 22 : tomcat-7.0.68-3.fc22 (2016-e6651efbaf)
2016-03-28 00:00:00
Apache Tomcat 7.0.x < 7.0.68 / 8.0.x < 8.0.32 Multiple Vulnerabilities
2016-05-24 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: tomcat-7.0.68-3.fc22
2016-03-25 22:27:03
osv
osv
Improper Verification of Source of a Communication Channel in Apache Tomcat
2022-05-14 01:18:35
tomcat6 - security update
2016-02-27 00:00:00
tomcat7 - security update
2016-04-17 00:00:00
ubuntucve
ubuntucve
CVE-2016-0763
2016-02-24 00:00:00
openvas
openvas
Apache Tomcat Security Manager Bypass Vulnerability (Feb 2016) - Linux
2016-02-25 00:00:00
Apache Tomcat Security Manager Bypass Vulnerability (Feb 2016) - Windows
2016-02-25 00:00:00
Oracle GlassFish Server Multiple Unspecified Vulnerabilities -01 (Jul 2016)
2016-07-22 00:00:00
f5
f5
freebsd
freebsd
tomcat -- multiple vulnerabilities
2016-02-22 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.68
2016-02-16 00:00:00
Fixed in Apache Tomcat 8.0.32
2016-02-08 00:00:00
Fixed in Apache Tomcat 9.0.0.M3
2016-01-05 00:00:00
amazon
amazon
Medium: tomcat8
2016-03-29 15:30:00
Medium: tomcat7
2016-03-29 15:30:00
ibm
ibm
redhat
redhat
(RHSA-2016:2808) Important: Red Hat JBoss Web Server 2.1.2 security update for Tomcat 7
2016-11-17 20:28:48
(RHSA-2016:1087) Moderate: Red Hat JBoss Web Server 3.0.3 update
2016-05-17 16:09:53
(RHSA-2016:1088) Moderate: Red Hat JBoss Web Server 3.0.3 update
2016-05-17 16:10:14
debian
debian
[SECURITY] [DLA 435-1] tomcat6 security update
2016-02-27 19:09:41
[SECURITY] [DSA 3609-1] tomcat8 security update
2016-06-29 19:54:21
[SECURITY] [DSA 3552-1] tomcat7 security update
2016-04-17 18:44:26
atlassian
atlassian
Upgrade Tomcat to the latest 8.0.x release
2016-02-19 00:04:16
Upgrade Tomcat to the latest 8.0.x release
2016-02-19 00:04:16
Upgrade Tomcat to the latest 8.0.x release
2016-02-19 00:04:16
suse
suse
Security update for tomcat (important)
2016-03-18 19:13:35
Security update for tomcat (important)
2016-03-23 18:09:46
Security update for tomcat (important)
2016-03-15 15:12:43
symantec
symantec
SA118 : February 2016 Apache Tomcat Vulnerabilities
2016-03-15 08:00:00
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2016-03-02 21:28:46
centos
centos
tomcat security update
2016-11-25 15:49:52
ubuntu
ubuntu
Tomcat vulnerabilities
2016-07-05 00:00:00
oraclelinux
oraclelinux
tomcat security, bug fix, and enhancement update
2016-11-09 00:00:00
tomcat security, bug fix, and enhancement update
2017-08-07 00:00:00
cloudfoundry
cloudfoundry
USN-3024-1: tomcat6, tomcat7 vulnerabilities | Cloud Foundry
2017-01-19 00:00:00
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2017-05-18 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00
Oracle Critical Patch Update Advisory - January 2017
2017-01-17 00:00:00