Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-3376HistoryNov 11, 2011 - 9:55 p.m.
CVE-2011-3376
2011-11-1121:55:00
Debian Security Bug Tracker
security-tracker.debian.org
9
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager applicationโs functionality.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | tomcat7 | <ย 7.0.75-1 | tomcat7_7.0.75-1_all.deb |
Related
nvd
nvd
CVE-2011-3376
2011-11-11 21:55:01
seebug
seebug
Apache Tomcat็ฎก็ๅบ็จ็จๅบๅฎๅ
จ้ๅถ็ป่ฟๆผๆด
2011-11-10 00:00:00
ubuntucve
ubuntucve
CVE-2011-3376
2011-11-11 00:00:00
securityvulns
securityvulns
Apache Tomcat privilege escalation
2011-11-11 00:00:00
prion
prion
Code injection
2011-11-11 21:55:00
cve
cve
CVE-2011-3376
2011-11-11 21:55:01
cvelist
cvelist
CVE-2011-3376
2011-11-11 21:00:00
nessus
nessus
Apache Tomcat 7.0.x < 7.0.22 Multiple Vulnerabilities
2012-02-22 00:00:00
Apache Tomcat 7.0.x < 7.0.22 Multiple Vulnerabilities
2012-02-22 00:00:00
Apache Tomcat 7.0.0 < 7.0.22 multiple vulnerabilities
2011-12-12 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.22
2011-10-01 00:00:00
openvas
openvas
Apache Tomcat 7.0.x < 7.0.22 Multiple Vulnerabilities - Linux
2021-10-29 00:00:00
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for DEBIANCVE:CVE-2011-3376