Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-6umz-z8db-kqcy
Summary
Improper Access Control
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.
Aliases
0
alias CVE-2016-8735
1
alias GHSA-cw54-59pw-4g8c
Fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@6.0.48
purl pkg:maven/org.apache.tomcat/tomcat@6.0.48
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.48
1
url pkg:maven/org.apache.tomcat/tomcat@7.0.73
purl pkg:maven/org.apache.tomcat/tomcat@7.0.73
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.73
2
url pkg:maven/org.apache.tomcat/tomcat@8.0.39
purl pkg:maven/org.apache.tomcat/tomcat@8.0.39
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.39
3
url pkg:maven/org.apache.tomcat/tomcat@8.5.7
purl pkg:maven/org.apache.tomcat/tomcat@8.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nndc-pabd-nbgf
1
vulnerability VCID-wyf8-8szf-qbfn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.7
4
url pkg:maven/org.apache.tomcat/tomcat@9.0.0.M12
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0.M12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.0.M12
5
url pkg:maven/org.apache.tomcat/tomcat-catalina@6.0.48
purl pkg:maven/org.apache.tomcat/tomcat-catalina@6.0.48
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@6.0.48
6
url pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.73
purl pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.73
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.73
7
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.39
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.39
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.39
8
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.7
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.7
9
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M12
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M12
10
url pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@6.0.48
purl pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@6.0.48
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@6.0.48
11
url pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@7.0.73
purl pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@7.0.73
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@7.0.73
12
url pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.0.39
purl pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.0.39
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.0.39
13
url pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.5.7
purl pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.5.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.5.7
14
url pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@9.0.0.M12
purl pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@9.0.0.M12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@9.0.0.M12
Affected_packages
0
url pkg:maven/org.apache.tomcat/tomcat@7.0.0
purl pkg:maven/org.apache.tomcat/tomcat@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1b-3pdg-jbfq
1
vulnerability VCID-2kjh-4r2g-rqe6
2
vulnerability VCID-3txt-1psa-5kf5
3
vulnerability VCID-46sr-9kr3-1ubw
4
vulnerability VCID-4qcn-52ug-mbd5
5
vulnerability VCID-4t2h-jjhm-y7fq
6
vulnerability VCID-59dd-qzpt-aucm
7
vulnerability VCID-5m85-3zyu-7qak
8
vulnerability VCID-5udv-rheh-kqfy
9
vulnerability VCID-6umz-z8db-kqcy
10
vulnerability VCID-6uuq-2a39-yubx
11
vulnerability VCID-74c7-a56p-kufz
12
vulnerability VCID-89e9-m968-vfhe
13
vulnerability VCID-937w-2w2q-7fdy
14
vulnerability VCID-9hm5-e4dw-6ffe
15
vulnerability VCID-aar2-398x-p3d8
16
vulnerability VCID-atus-ryef-17h1
17
vulnerability VCID-axzz-cadr-b7fv
18
vulnerability VCID-dk58-p9py-rka9
19
vulnerability VCID-e2gy-1c6a-6fdf
20
vulnerability VCID-e72e-axdj-7qfw
21
vulnerability VCID-f4ka-47dk-zffs
22
vulnerability VCID-fu9h-e3jx-abe2
23
vulnerability VCID-g3vd-74yh-s7bn
24
vulnerability VCID-gmjm-6ck2-skgu
25
vulnerability VCID-hqzu-shyu-j3hp
26
vulnerability VCID-j1m6-79yt-f7h5
27
vulnerability VCID-jw6e-g8z9-43ej
28
vulnerability VCID-jzta-navk-87bn
29
vulnerability VCID-nnye-4xbb-kuf5
30
vulnerability VCID-nxb3-55eu-auhp
31
vulnerability VCID-pq53-6deg-abfx
32
vulnerability VCID-qhqg-ekuv-z7fc
33
vulnerability VCID-redv-2x5y-8khx
34
vulnerability VCID-s37s-p75k-27e6
35
vulnerability VCID-se44-f85s-xyex
36
vulnerability VCID-sk1w-8yt4-93cv
37
vulnerability VCID-tcmv-6ftg-fqen
38
vulnerability VCID-vsta-e8jg-4qa8
39
vulnerability VCID-wtke-y2cx-x3et
40
vulnerability VCID-xjj5-fy4e-e7ha
41
vulnerability VCID-y9hs-ymcm-3ucx
42
vulnerability VCID-yusx-ncpv-sfhg
43
vulnerability VCID-yvcg-96dp-r7e6
44
vulnerability VCID-zm75-zwps-h3fv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.0
1
url pkg:maven/org.apache.tomcat/tomcat@8.0.0
purl pkg:maven/org.apache.tomcat/tomcat@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1b-3pdg-jbfq
1
vulnerability VCID-2kjh-4r2g-rqe6
2
vulnerability VCID-5udv-rheh-kqfy
3
vulnerability VCID-6umz-z8db-kqcy
4
vulnerability VCID-6uuq-2a39-yubx
5
vulnerability VCID-937w-2w2q-7fdy
6
vulnerability VCID-axzz-cadr-b7fv
7
vulnerability VCID-fukm-h3r6-s7cr
8
vulnerability VCID-g3vd-74yh-s7bn
9
vulnerability VCID-gmjm-6ck2-skgu
10
vulnerability VCID-hqzu-shyu-j3hp
11
vulnerability VCID-j1m6-79yt-f7h5
12
vulnerability VCID-jzta-navk-87bn
13
vulnerability VCID-nnye-4xbb-kuf5
14
vulnerability VCID-pq53-6deg-abfx
15
vulnerability VCID-q7g1-m4e7-pya4
16
vulnerability VCID-rtmv-qetu-yqfa
17
vulnerability VCID-se44-f85s-xyex
18
vulnerability VCID-vu84-dfwa-z3dg
19
vulnerability VCID-xjj5-fy4e-e7ha
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.0
2
url pkg:maven/org.apache.tomcat/tomcat@8.5.0
purl pkg:maven/org.apache.tomcat/tomcat@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-3nsr-9s9y-ckft
2
vulnerability VCID-4nx6-t8vd-bqcu
3
vulnerability VCID-59dd-qzpt-aucm
4
vulnerability VCID-6umz-z8db-kqcy
5
vulnerability VCID-dast-z2hv-2yfe
6
vulnerability VCID-dbu6-fhrs-aubn
7
vulnerability VCID-dk58-p9py-rka9
8
vulnerability VCID-g3vd-74yh-s7bn
9
vulnerability VCID-gmjm-6ck2-skgu
10
vulnerability VCID-hqzu-shyu-j3hp
11
vulnerability VCID-jzta-navk-87bn
12
vulnerability VCID-kqng-d1f2-myg5
13
vulnerability VCID-nxb3-55eu-auhp
14
vulnerability VCID-q7g1-m4e7-pya4
15
vulnerability VCID-qth9-7326-hffp
16
vulnerability VCID-rk89-9dw5-w3gg
17
vulnerability VCID-rtmv-qetu-yqfa
18
vulnerability VCID-s37s-p75k-27e6
19
vulnerability VCID-se44-f85s-xyex
20
vulnerability VCID-tcmv-6ftg-fqen
21
vulnerability VCID-u95s-xhwk-vka6
22
vulnerability VCID-vu84-dfwa-z3dg
23
vulnerability VCID-wmb3-3j7y-due7
24
vulnerability VCID-xns8-63b5-guf2
25
vulnerability VCID-y9hs-ymcm-3ucx
26
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.0
3
url pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-3nsr-9s9y-ckft
2
vulnerability VCID-4nx6-t8vd-bqcu
3
vulnerability VCID-5m85-3zyu-7qak
4
vulnerability VCID-6umz-z8db-kqcy
5
vulnerability VCID-axzz-cadr-b7fv
6
vulnerability VCID-dast-z2hv-2yfe
7
vulnerability VCID-e2gy-1c6a-6fdf
8
vulnerability VCID-gmjm-6ck2-skgu
9
vulnerability VCID-hqzu-shyu-j3hp
10
vulnerability VCID-jzta-navk-87bn
11
vulnerability VCID-n4zk-mdyw-3fcz
12
vulnerability VCID-s37s-p75k-27e6
13
vulnerability VCID-se44-f85s-xyex
14
vulnerability VCID-y9hs-ymcm-3ucx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
4
url pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47v1-3uxc-zkaj
1
vulnerability VCID-6umz-z8db-kqcy
2
vulnerability VCID-7fh9-36qs-jfg5
3
vulnerability VCID-8fn4-hnez-y3eb
4
vulnerability VCID-937w-2w2q-7fdy
5
vulnerability VCID-jzta-navk-87bn
6
vulnerability VCID-xa95-zsnk-3kg9
7
vulnerability VCID-xjj5-fy4e-e7ha
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.0
5
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-47v1-3uxc-zkaj
1
vulnerability VCID-6umz-z8db-kqcy
2
vulnerability VCID-937w-2w2q-7fdy
3
vulnerability VCID-jzta-navk-87bn
4
vulnerability VCID-xjj5-fy4e-e7ha
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.0
6
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6umz-z8db-kqcy
1
vulnerability VCID-7fh9-36qs-jfg5
2
vulnerability VCID-jzta-navk-87bn
3
vulnerability VCID-kqng-d1f2-myg5
4
vulnerability VCID-rk89-9dw5-w3gg
5
vulnerability VCID-urhs-6aus-syb1
6
vulnerability VCID-xa95-zsnk-3kg9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.0
7
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M1
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6umz-z8db-kqcy
1
vulnerability VCID-7fh9-36qs-jfg5
2
vulnerability VCID-jzta-navk-87bn
3
vulnerability VCID-u95s-xhwk-vka6
4
vulnerability VCID-xa95-zsnk-3kg9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M1
8
url pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@7.0.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6umz-z8db-kqcy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@7.0.0
9
url pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.0.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6umz-z8db-kqcy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.0.0
10
url pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.5.0
purl pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6umz-z8db-kqcy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@8.5.0
11
url pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@9.0.0.M1
purl pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@9.0.0.M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6umz-z8db-kqcy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote@9.0.0.M1
References
0
reference_url https://access.redhat.com/errata/RHSA-2017:0455
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0455
1
reference_url https://access.redhat.com/errata/RHSA-2017:0456
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0456
2
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
url https://github.com/apache/tomcat
3
reference_url https://github.com/apache/tomcat80/commit/0f76016a4ec45635e450ada9c84ff7ee0c5f3799
reference_id
reference_type
scores
url https://github.com/apache/tomcat80/commit/0f76016a4ec45635e450ada9c84ff7ee0c5f3799
4
reference_url https://github.com/apache/tomcat/commit/0e83ad3e547fc9a75a258799ef581249b40a82a6
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/0e83ad3e547fc9a75a258799ef581249b40a82a6
5
reference_url https://github.com/apache/tomcat/commit/292d6ccdc9edbf80859929b0af070b2ea99fa688
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/292d6ccdc9edbf80859929b0af070b2ea99fa688
6
reference_url https://github.com/apache/tomcat/commit/7e3a037055cca4a17e90b49399fb1bab4dd7c821
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/7e3a037055cca4a17e90b49399fb1bab4dd7c821
7
reference_url https://github.com/search?q=repo%3Aapache%2Ftomcat+catalina.mbeans+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code
reference_id
reference_type
scores
url https://github.com/search?q=repo%3Aapache%2Ftomcat+catalina.mbeans+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code
8
reference_url https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
18
reference_url https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E
19
reference_url https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
20
reference_url https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E
21
reference_url https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E
22
reference_url https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E
23
reference_url https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
24
reference_url https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E
25
reference_url https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
26
reference_url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
27
reference_url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
28
reference_url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
29
reference_url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
30
reference_url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
31
reference_url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
32
reference_url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
34
reference_url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
35
reference_url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
36
reference_url https://security.netapp.com/advisory/ntap-20180607-0001
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20180607-0001
37
reference_url https://usn.ubuntu.com/4557-1
reference_id
reference_type
scores
url https://usn.ubuntu.com/4557-1
38
reference_url https://web.archive.org/web/20170423095340/http://www.securityfocus.com/bid/94463
reference_id
reference_type
scores
url https://web.archive.org/web/20170423095340/http://www.securityfocus.com/bid/94463
39
reference_url https://web.archive.org/web/20170928203901/http://www.securitytracker.com/id/1037331
reference_id
reference_type
scores
url https://web.archive.org/web/20170928203901/http://www.securitytracker.com/id/1037331
40
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-8735
reference_id
reference_type
scores
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-8735
41
reference_url https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
reference_id
reference_type
scores
url https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
42
reference_url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
reference_id
reference_type
scores
url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
43
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-8735
reference_id CVE-2016-8735
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2016-8735
44
reference_url https://github.com/advisories/GHSA-cw54-59pw-4g8c
reference_id GHSA-cw54-59pw-4g8c
reference_type
scores
url https://github.com/advisories/GHSA-cw54-59pw-4g8c
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 284
name Improper Access Control
description The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
2
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-6umz-z8db-kqcy