When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

veracode 1

debiancve 1

prion 1

osv 4

archlinux 1

redhatcve 1

openvas 7

checkpoint_advisories 1

nessus 10

f5 1

debian 2

dsquare 1

cve 1

github 1

cisa 1

kaspersky 1

myhack58 1

ubuntucve 1

amazon 2

seebug 2

mageia 1

tomcat 1

ibm 7

suse 1

ubuntu 1

redhat 2

rosalinux 1

symantec 1

veracode

Information Disclosure

2017-09-20 02:23:33

debiancve

CVE-2017-12616

2017-09-19 13:29:00

prion

Design/Logic Flaw

2017-09-19 13:29:00

osv

tomcat7 - security update

2017-09-24 00:00:00

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

2022-05-14 01:10:16

CVE-2017-12616

2017-09-19 13:29:00

archlinux

[ASA-201709-17] tomcat7: information disclosure

2017-09-19 00:00:00

redhatcve

CVE-2017-12616

2019-10-08 03:55:37

openvas

Apache Tomcat 'VirtualDirContext' Information Disclosure Vulnerability - Windows

2017-09-25 00:00:00

Debian: Security Advisory (DLA-1108-1)

2018-02-06 00:00:00

Apache Tomcat 'VirtualDirContext' Information Disclosure Vulnerability - Linux

2017-09-25 00:00:00

checkpoint_advisories

Apache Tomcat VirtualDirContext Information Disclosure (CVE-2017-12616)

2017-10-02 00:00:00

nessus

Debian DLA-1108-1 : tomcat7 security update

2017-09-25 00:00:00

Apache Tomcat 7.0.0 < 7.0.81 multiple vulnerabilities

2017-09-19 00:00:00

Amazon Linux 2 : tomcat (ALAS-2023-2020)

2023-05-02 00:00:00

K24335161 : Apache Tomcat vulnerability CVE-2017-12616

2017-09-28 00:00:00

debian

[SECURITY] [DLA 1108-1] tomcat7 security update

2017-09-24 16:53:33

[SECURITY] [DLA 1400-1] tomcat7 security update

2018-06-27 20:56:40

dsquare

Apache Tomcat VirtualDirContext Class File Handling Remote JSP Source Code Disclosure

2018-03-09 00:00:00

cve

CVE-2017-12616

2017-09-19 13:29:00

github

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

2022-05-14 01:10:16

cisa

Apache Releases Security Updates for Apache Tomcat

2017-09-19 00:00:00

kaspersky

KLA11106 Multiple vulnerabilities in Apache Tomcat

2017-09-19 00:00:00

myhack58

Tomcat remote code execution vulnerability flaws bug research CVE-2017-12615 and patch Bypass-vulnerability warning-the black bar safety net

2017-09-20 00:00:00

ubuntucve

CVE-2017-12616

2017-09-19 00:00:00

amazon

Important: tomcat

2023-04-27 18:36:00

Important: tomcat7

2023-04-27 16:19:00

seebug

Tomcat code execution vulnerability(CVE-2017-12615)

2017-09-20 00:00:00

Tomcat information disclosure Vulnerability(CVE-2017-12616 )analysis

2017-09-21 00:00:00

mageia

Updated tomcat packages fix security vulnerability

2017-09-21 16:43:32

tomcat

Fixed in Apache Tomcat 7.0.81

2017-08-16 00:00:00

ibm

Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Reporting Service shipped with Rational Insight (CVE-2017-12615, CVE-2017-12616, CVE-2017-12617)

2018-06-17 05:23:49

Security Bulletin: Security vulnerabilities in Apache Tomcat affect multiple IBM Rational products based on IBM's Jazz technology

2021-04-28 18:35:50

Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2017-12615, CVE-2017-12616, CVE-2017-12617)

2018-06-17 05:23:49

suse

Security update for tomcat (important)

2017-11-23 21:09:20

ubuntu

Tomcat vulnerabilities

2018-05-30 00:00:00

redhat

(RHSA-2018:0466) Important: Red Hat JBoss Web Server 3.1.0 Service Pack 2 security update

2018-03-07 15:08:21

(RHSA-2018:0465) Important: Red Hat JBoss Web Server 3.1.0 Service Pack 2 security update

2018-03-07 15:08:16

rosalinux

Advisory ROSA-SA-2021-1988

2021-07-02 18:17:52

symantec

SA156: Apache Tomcat Vulnerabilities Apr-Oct 2017

2017-11-07 08:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

6.4 Medium

AI Score

Confidence

Low

0.926 High

EPSS

Percentile

99.0%

JSON

Related for CVELIST:CVE-2017-12616