Beveiligingsadvies

CVE-2016-0714

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-02-25 01:00:00

Laatst bijgewerkt 2024-08-05 22:30:03

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.

← Alle CVE's bekijken Bekijk op cve.org ↗