CVE-2016-0706

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended...

CVE-2016-0706

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended...

PT-2016-1315

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 6.x through 6.0.44 Apache Tomcat versions 7.x through 7.0.67 Apache Tomcat versions 8.x through 8.0.30 Apache Tomcat versions 9.x through 9.0.0.M1 Description The issue is related to the lack of protection for internal...