Security Manager bypass in Apache Foundation products - CVE-2016-0706

Vulnerability details

The vulnerability allows a local attacker to obtain potentially sensitive information.

A local attacker, who controls web application, can use StatusManagerServlet, when a security manager was configured, to obtain potentially sensitive information, which belongs to other users. The attacker will be able to obtain a list of all deployed applications and a list of the HTTP request lines for all requests currently being processed. This could have exposed sensitive information from other web applications, such as session IDs, to the web application.

Successful exploitation of the vulnerability may allow a local attacker to gain access to potentially sensitive information.

Affected software

How to mitigate CVE-2016-0706

External References

• https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.45
• https://tomcat.apache.org/security-7.html
• https://tomcat.apache.org/security-8.html
• https://tomcat.apache.org/security-9.html
• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
• http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

Related Security Bulletins

• Multiple vulnerabilities in Apache Tomcat
• SUSE Linux update for tomcat6
• Amazon Linux AMI update for tomcat6
• Multiple vulnerabilities in IBM FlashSystem models 840 and 900
• Multiple vulnerabilities in IBM SAN Volume Controller and Storwize Family
• Fedora 23 update for tomcat
• Fedora 22 update for tomcat
• Fedora 22 update for tomcat
• Fedora 22 update for tomcat
• Fedora EPEL 6 update for tomcat
• Multiple vulnerabilities in IBM Storage Copy Data Management