GHSA-w7cg-5969-678w
Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token
At a glance
- Published
- Updated
- CVE
- CVE-2015-5351
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.apache.tomcat:tomcat | introduced 0, fixed 7.0.68 |
| Maven · org.apache.tomcat:tomcat | introduced 8.0.0, fixed 8.0.31 |
| Maven · org.apache.tomcat:tomcat | introduced 9.0.0.M0, fixed 9.0.0.M2 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2015-5351 ADVISORY
- https://access.redhat.com/errata/RHSA-2016:1087 WEB
- https://access.redhat.com/errata/RHSA-2016:1088 WEB
- https://bto.bluecoat.com/security-advisory/sa118 WEB
- https://github.com/apache/tomcat PACKAGE
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 WEB
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 WEB
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E WEB
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E WEB
- https://security.gentoo.org/glsa/201705-09 WEB
- https://security.netapp.com/advisory/ntap-20180531-0001 WEB
- https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02978021 WEB
- https://web.archive.org/web/20160321234551/http://www.securitytracker.com/id/1035069 WEB
- https://web.archive.org/web/20161020161943/http://www.securityfocus.com/bid/83330 WEB
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html WEB
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html WEB
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html WEB
- http://packetstormsecurity.com/files/135882/Apache-Tomcat-CSRF-Token-Leak.html WEB
- http://rhn.redhat.com/errata/RHSA-2016-1089.html WEB
- http://rhn.redhat.com/errata/RHSA-2016-2599.html WEB
- http://rhn.redhat.com/errata/RHSA-2016-2807.html WEB
- http://rhn.redhat.com/errata/RHSA-2016-2808.html WEB
- http://seclists.org/bugtraq/2016/Feb/148 WEB
- http://svn.apache.org/viewvc?view=revision&revision=1720652 WEB
- http://svn.apache.org/viewvc?view=revision&revision=1720655 WEB
- http://svn.apache.org/viewvc?view=revision&revision=1720658 WEB
- http://svn.apache.org/viewvc?view=revision&revision=1720660 WEB
- http://svn.apache.org/viewvc?view=revision&revision=1720661 WEB
- http://svn.apache.org/viewvc?view=revision&revision=1720663 WEB
- http://tomcat.apache.org/security-7.html WEB
- http://tomcat.apache.org/security-8.html WEB
- http://tomcat.apache.org/security-9.html WEB
- http://www.debian.org/security/2016/dsa-3530 WEB
- http://www.debian.org/security/2016/dsa-3552 WEB
- http://www.debian.org/security/2016/dsa-3609 WEB
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html WEB
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html WEB
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html WEB
- http://www.ubuntu.com/usn/USN-3024-1 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |