Lucene search
HistoryNov 11, 2011 - 9:55 p.m.
CVE-2011-3376
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
5.1%
org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager applicationโs functionality.
Affected configurations
Node
apachetomcatMatch7.0.0
ORapachetomcatMatch7.0.0beta
ORapachetomcatMatch7.0.1
ORapachetomcatMatch7.0.2
ORapachetomcatMatch7.0.3
ORapachetomcatMatch7.0.4
ORapachetomcatMatch7.0.5
ORapachetomcatMatch7.0.6
ORapachetomcatMatch7.0.7
ORapachetomcatMatch7.0.8
ORapachetomcatMatch7.0.9
ORapachetomcatMatch7.0.10
ORapachetomcatMatch7.0.11
ORapachetomcatMatch7.0.12
ORapachetomcatMatch7.0.13
ORapachetomcatMatch7.0.14
ORapachetomcatMatch7.0.15
ORapachetomcatMatch7.0.16
ORapachetomcatMatch7.0.17
ORapachetomcatMatch7.0.18
ORapachetomcatMatch7.0.19
ORapachetomcatMatch7.0.20
ORapachetomcatMatch7.0.21
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apache | tomcat | 7.0.0 | cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:* |
| apache | tomcat | 7.0.0 | cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:* |
| apache | tomcat | 7.0.1 | cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:* |
| apache | tomcat | 7.0.2 | cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:* |
| apache | tomcat | 7.0.3 | cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:* |
| apache | tomcat | 7.0.4 | cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:* |
| apache | tomcat | 7.0.5 | cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:* |
| apache | tomcat | 7.0.6 | cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:* |
| apache | tomcat | 7.0.7 | cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:* |
| apache | tomcat | 7.0.8 | cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:* |
Related
debiancve
debiancve
CVE-2011-3376
2011-11-11 21:55:00
ubuntucve
ubuntucve
CVE-2011-3376
2011-11-11 00:00:00
seebug
seebug
Apache Tomcat็ฎก็ๅบ็จ็จๅบๅฎๅ
จ้ๅถ็ป่ฟๆผๆด
2011-11-10 00:00:00
prion
prion
Code injection
2011-11-11 21:55:00
securityvulns
securityvulns
Apache Tomcat privilege escalation
2011-11-11 00:00:00
cvelist
cvelist
CVE-2011-3376
2011-11-11 21:00:00
cve
cve
CVE-2011-3376
2011-11-11 21:55:01
tomcat
tomcat
Fixed in Apache Tomcat 7.0.22
2011-10-01 00:00:00
nessus
nessus
Apache Tomcat 7.0.x < 7.0.22 Multiple Vulnerabilities
2012-02-22 00:00:00
Apache Tomcat 7.0.x < 7.0.22 Multiple Vulnerabilities
2012-02-22 00:00:00
Apache Tomcat 7.0.0 < 7.0.22 multiple vulnerabilities
2011-12-12 00:00:00
openvas
openvas
Apache Tomcat 7.0.x < 7.0.22 Multiple Vulnerabilities - Linux
2021-10-29 00:00:00
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2011-3376