GHSA-9hjv-9h75-xmpp
Improper Verification of Source of a Communication Channel in Apache Tomcat
At a glance
- Published
- Updated
- CVE
- CVE-2016-0763
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
The `setGlobalContext` method in `org/apache/naming/factory/ResourceLinkFactory.java` in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.apache.tomcat:tomcat | introduced 7.0.0, fixed 7.0.68 |
| Maven · org.apache.tomcat:tomcat | introduced 8.0.0, fixed 8.0.32 |
| Maven · org.apache.tomcat:tomcat | introduced 9.0.0M1, fixed 9.0.0.M3 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2016-0763 ADVISORY
- https://github.com/apache/tomcat/commit/76ebc9007567c8326217dd94844540e1e27d8468 WEB
- https://github.com/apache/tomcat/commit/c08641da04d31f730b56b8675301e55db97dfe88 WEB
- https://github.com/apache/tomcat80/commit/0531f7aeff1999d362e0a68512a3517f2cf1a6ae WEB
- https://web.archive.org/web/20160404202803/http://www.securitytracker.com/id/1035069 WEB
- https://web.archive.org/web/20160314101138/http://www.securityfocus.com/bid/83326 WEB
- https://security.netapp.com/advisory/ntap-20180531-0001 WEB
- https://security.gentoo.org/glsa/201705-09 WEB
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E WEB
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755 WEB
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 WEB
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 WEB
- https://github.com/apache/tomcat PACKAGE
- https://bto.bluecoat.com/security-advisory/sa118 WEB
- https://access.redhat.com/errata/RHSA-2016:1088 WEB
- https://access.redhat.com/errata/RHSA-2016:1087 WEB
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179356.html WEB
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html WEB
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html WEB
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html WEB
- http://rhn.redhat.com/errata/RHSA-2016-1089.html WEB
- http://rhn.redhat.com/errata/RHSA-2016-2599.html WEB
- http://rhn.redhat.com/errata/RHSA-2016-2807.html WEB
- http://rhn.redhat.com/errata/RHSA-2016-2808.html WEB
- http://seclists.org/bugtraq/2016/Feb/147 WEB
- http://svn.apache.org/viewvc?view=revision&revision=1725926 WEB
- http://svn.apache.org/viewvc?view=revision&revision=1725929 WEB
- http://svn.apache.org/viewvc?view=revision&revision=1725931 WEB
- http://tomcat.apache.org/security-7.html WEB
- http://tomcat.apache.org/security-8.html WEB
- http://tomcat.apache.org/security-9.html WEB
- http://www.debian.org/security/2016/dsa-3530 WEB
- http://www.debian.org/security/2016/dsa-3552 WEB
- http://www.debian.org/security/2016/dsa-3609 WEB
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html WEB
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html WEB
- http://www.ubuntu.com/usn/USN-3024-1 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |