Code injection

2011-11-1121:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.4%

JSON

org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application’s functionality.

CPENameOperatorVersion
tomcateq7.0.12
tomcateq7.0.20
tomcateq7.0.8
tomcateq7.0.1
tomcateq7.0.2
tomcateq7.0.5
tomcateq7.0.0
tomcateq7.0.6
tomcateq7.0.18
tomcateq7.0.14