Linux Distros Unpatched Vulnerability : CVE-2016-5018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a...

RHEL 5 : tomcat5 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - tomcat: security manager bypass via IntrospectHelper utility function CVE-2016-5018 - tomcat: Remote Code...

Debian: Security Advisory (DLA-746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

K65230547: Apache Tomcat vulnerabilities CVE-2016-5018, CVE-2016-6794, and CVE-2016-6796

Security Advisory Description CVE-2016-5018 In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web...

com.adobe.granite:com.adobe.granite.crx-explorer (>=1.0.0, <=1.0.4), com.cj.restspecs:rest-specs-mockrunner (>=9.0.3, <=10.0.1) +85 more potentially affected by CVE-2016-5018 via org.apache.tomcat:jasper (>=6.0.13, <=6.0.44)

org.apache.tomcat:jasper MAVEN version =6.0.13, =1.0.0, =9.0.3, =9.0.3, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.6 and more Source cves: CVE-2016-5018 Source advisory: GHSA-4V3G-G84W-HV7R...

com.adobe.granite:com.adobe.granite.crx-explorer (>=1.0.0, <=1.0.4), com.cj.restspecs:rest-specs-mockrunner (>=9.0.3, <=10.0.1) +85 more potentially affected by CVE-2016-5018 via org.apache.tomcat:jasper (>=6.0.13, <=6.0.44)

org.apache.tomcat:jasper MAVEN version =6.0.13, =1.0.0, =9.0.3, =9.0.3, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.6 and more Source cves: CVE-2016-5018 Source advisory: OSV:GHSA-4V3G-G84W-HV7R...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.26) +62 more potentially affected by CVE-2016-5018 via org.apache.tomcat.embed:tomcat-embed-jasper (>=7.0.8, <=7.0.69)

org.apache.tomcat.embed:tomcat-embed-jasper MAVEN version =7.0.8, =0.0.1, =1.0, =1.0, =1.2.1.aghost-fix.20201109, =1.0-release, =1.0-release, =7.0.22, =0.1.0, =1.0, =1.0.b1, =1.0.b11 and more Source cves: CVE-2016-5018 Source advisory: OSV:GHSA-4V3G-G84W-HV7R...

ch.rasc:embeddedtc (>=2.0, <=2.14), ch.sbb.releasetrain:jsfbootadapter (>=0.0.25, <=0.9.6) +100 more potentially affected by CVE-2016-5018 via org.apache.tomcat.embed:tomcat-embed-jasper (>=8.0.1, <=8.0.36)

org.apache.tomcat.embed:tomcat-embed-jasper MAVEN version =8.0.1, =2.0, =0.0.25, =0.0.4, =1.0.0, =1.0.5, =1.0.5, =0.9.1-beta4, =8.0.18.0-m1, =0.3.0, =0.4.2 and more Source cves: CVE-2016-5018 Source advisory: GHSA-4V3G-G84W-HV7R...

ch.rasc:embeddedtc (>=2.0, <=2.14), ch.sbb.releasetrain:jsfbootadapter (>=0.0.25, <=0.9.6) +100 more potentially affected by CVE-2016-5018 via org.apache.tomcat.embed:tomcat-embed-jasper (>=8.0.1, <=8.0.36)

org.apache.tomcat.embed:tomcat-embed-jasper MAVEN version =8.0.1, =2.0, =0.0.25, =0.0.4, =1.0.0, =1.0.5, =1.0.5, =0.9.1-beta4, =8.0.18.0-m1, =0.3.0, =0.4.2 and more Source cves: CVE-2016-5018 Source advisory: OSV:GHSA-4V3G-G84W-HV7R...

ch.sbb.releasetrain:webui (>=0.0.26, <=0.9.5), com.sdl.dxa.modules:dxa-module-audience-manager-web8 (1.6.0) +26 more potentially affected by CVE-2016-5018 via org.apache.tomcat.embed:tomcat-embed-jasper (>=8.5.0, <=8.5.4)

org.apache.tomcat.embed:tomcat-embed-jasper MAVEN version =8.5.0, =0.0.26, =0.0.2, =0.0.1, =0.0.2, =0.0.0, =0.0.0, =0.0.0, =2.1.0, =2.1.0, =2.2.4 and more Source cves: CVE-2016-5018 Source advisory: OSV:GHSA-4V3G-G84W-HV7R...

com.dthoffman.tomcatmock:junit-example (0.0.1), com.dthoffman.tomcatmock:spock-example (0.0.1) +56 more potentially affected by CVE-2016-5018 via org.apache.tomcat:tomcat-jasper (>=8.0.0-rc3, <=8.0.36)

org.apache.tomcat:tomcat-jasper MAVEN version =8.0.0-rc3, =0.9.1-beta4, =8.0.18.0-m1, =0.3.0, =2.1, =1.8.0, =2.1.1-rc1, =1.0-rc1, =1.0-rc2 and more Source cves: CVE-2016-5018 Source advisory: OSV:GHSA-4V3G-G84W-HV7R...

com.flowcentraltech.flowcentral:flowcentral-tomcat (1.0.64), com.tcdng.unify:unify-tomcat (2.1.64) potentially affected by CVE-2016-5018 via org.apache.tomcat:tomcat-jasper (9.0.0.m6)

org.apache.tomcat:tomcat-jasper MAVEN version 9.0.0.m6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-jasper and may be impacted: - com.flowcentraltech.flowcentral:flowcentral-tomcat 1.0.64 - com.tcdng.unify:unify-tomcat 2.1.6...

com.dthoffman.tomcatmock:junit-example (0.0.1), com.dthoffman.tomcatmock:spock-example (0.0.1) +56 more potentially affected by CVE-2016-5018 via org.apache.tomcat:tomcat-jasper (>=8.0.0-rc3, <=8.0.36)

org.apache.tomcat:tomcat-jasper MAVEN version =8.0.0-rc3, =0.9.1-beta4, =8.0.18.0-m1, =0.3.0, =2.1, =1.8.0, =2.1.1-rc1, =1.0-rc1, =1.0-rc2 and more Source cves: CVE-2016-5018 Source advisory: GHSA-4V3G-G84W-HV7R...

com.flowcentraltech.flowcentral:flowcentral-tomcat (1.0.64), com.tcdng.unify:unify-tomcat (2.1.64) potentially affected by CVE-2016-5018 via org.apache.tomcat:tomcat-jasper (9.0.0.m6)

org.apache.tomcat:tomcat-jasper MAVEN version 9.0.0.m6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-jasper and may be impacted: - com.flowcentraltech.flowcentral:flowcentral-tomcat 1.0.64 - com.tcdng.unify:unify-tomcat 2.1.6...

cn.zidot:sprite-component-web (1.0.0), de.javakaffee.msm:memcached-session-manager-tc8 (>=1.9.5, <=2.0.0) +21 more potentially affected by CVE-2016-5018 via org.apache.tomcat:tomcat-jasper (>=8.5.2, <=8.5.4)

org.apache.tomcat:tomcat-jasper MAVEN version =8.5.2, =1.9.5, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.1 and more Source cves: CVE-2016-5018 Source advisory: OSV:GHSA-4V3G-G84W-HV7R...

br.com.caelum.vraptor:vraptor-test (>=2.0.0, <=4.0.0), com.brienwheeler.apps:apps-tomcat (>=1.0-release, <=1.08) +114 more potentially affected by CVE-2016-5018 via org.apache.tomcat:tomcat-jasper (>=7.0.0, <=7.0.70)

org.apache.tomcat:tomcat-jasper MAVEN version =7.0.0, =2.0.0, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =7.0.22, =0.1.0, =1.0, =2.1, =1.0, =1.0.0, =1.1.0 - com.intershop.gradle.isml:isml-gradle-plugin 1.1.0 and more Source cves: CVE-2016-5018 Source advisory: GHSA-4V3G-G84W-HV7R...

Mageia: Security Advisory (MGASA-2016-0367)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: OpenSSL vulnerabilities affect IBM Rational Team Concert (CVE-2016-1240, CVE-2016-6797, etc)

Summary OpenSSL vulnerabilities were disclosed recently by the OpenSSL Project. OpenSSL is used by Rational BuildForge Agent shipped with IBM Rational Team Concert. Rational BuildForge has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-1240 DESCRIPTION: Apache Tomcat could...

SUSE: Security Advisory (SUSE-SU-2017:1660-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4557-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...