Information disclosure in Apache Tomcat - CVE-2016-6794

Vulnerability identifier: #VU1090

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-6794

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows an application to obtain potentially sensitive information on the target system.
The weakness is due to insufficient accesss control. By invoking the system property replacement feature, a malicious application can bypass a configured SecurityManager and read potentially sensitive system properties.
Successful exploitation of the vulnerability results in disclosure of important data on the vulnerable system.

Apache Tomcat
Ubuntu
Storage Copy Data Management
EMC Cloud Tiering Appliance
libservlet2.5-java (Ubuntu package)

Update to version 6.0.47, 7.0.72, 8.0.37, 8.5.5, 9.0.0.M10.

Storage Copy Data Management - update to 2.2.26.0
libservlet2.5-java (Ubuntu package) - update to 6.0.45+dfsg-1ubuntu0.1
EMC Cloud Tiering Appliance - addressed in versions 13.0.0.2.29, 13.1.0.2.20

• http://tomcat.apache.org/security-8.html

• Information disclosure in Apache Tomcat
• Multiple vulnerabilities in Dell EMC Cloud Tiering Appliance
• Ubuntu update for tomcat6
• Multiple vulnerabilities in IBM Storage Copy Data Management