PT-2016-7819

🗓️ 02 Dec 2016 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 3 Views

Local users with access to the tomcat account can gain root privileges via a setgid program.

Reporter	Title	Published	Views	Family All 478
IBM Security Bulletins	Release of QRadar 7.2.8 Patch 4 (7.2.8.20170224202650) Updated w/Security Bulletins	10 May 201914:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence Server 2017Q1 Security Updater : IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.	15 Jun 201823:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem models 840 and 900	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat vulnerability affects IBM Algo One - Counterparty Credit Risk (CVE-2016-8745)	15 Jun 201822:49	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat affect multiple IBM Rational products based on IBM's Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM Cognos Business Intelligence shipped with IBM Cognos Planning (CVE-2016-5388).	25 Jun 201805:54	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat as used in IBM QRadar SIEM is vulnerable to various CVE's	16 Jun 201821:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem model V840	18 Jun 201800:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	16 Jun 202221:33	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in Jazz Reporting Service shipped with Rational Reporting for Development Intelligence	17 Jun 201805:22	–	ibm

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2016-8745
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
debian	www.debian.org/security/2016/dsa-3738
packages	www.packages.debian.org/src:tomcat7
bdu	www.bdu.fstec.ru/vul/2022-04494
ubuntu	www.ubuntu.com/security/CVE-2016-8735
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
oracle	www.oracle.com/security-alerts/cpuApr2021.html
security	www.security.netapp.com/advisory/ntap-20180731-0002
osv	www.osv.dev/vulnerability/USN-3177-1

14 Jun 2021 00:00Current

CVSS 3.17.8 - 9.1

CVSS 27.2

CVSS 38.1

EPSS0.50896

SSVC

tomcat6 tomcat7 tomcat8 local attack root privileges setgid program