Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2016-5018

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4v3g-g84w-hv7r

Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.

gitlab/maven/org.apache.tomcat.embed/tomcat-embed-jasper/CVE-2016-5018

Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.

gitlab/maven/org.apache.tomcat/jasper/CVE-2016-5018

Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.

gitlab/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5018

Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.

gitlab/maven/org.apache.tomcat/tomcat-jasper/CVE-2016-5018

Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.

gitlab/maven/tomcat/jasper-runtime/CVE-2016-5018

Improper Access Control In Apache Tomcat, a malicious web application was able to bypass a configured `SecurityManager` via a Tomcat utility method that was accessible to web applications.