VIR Vulnerability Intelligence Relay

CVE-2016-0706

medium
Published 2016-02-25 · Modified 2024-03-16
CVSS v3
4.3
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v2
4.0
VIR risk
4.3

Description

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties list, which allows remote authenticated users to bypass intended SecurityManager restrictions and read arbitrary HTTP requests, and consequently discover session ID values, via a crafted web application.

Predictions

Exploit likelihood
53%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2016-0706

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://tomcat.apache.org/security-9.html

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://tomcat.apache.org/security-8.html

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://tomcat.apache.org/security-7.html

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://tomcat.apache.org/security-6.html

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2016-0706.html

OS impact
OSVersionStatusFixed in
suse slesaffected
debian debian7.0affected
debian debian8.0affected
ubuntu ubuntu12.04affected
ubuntu ubuntu14.04affected
ubuntu ubuntu15.10affected
ubuntu ubuntu16.04affected
debian debianbookwormfixed0
debian debianbullseyefixed0
debian debianforkyfixed0
debian debiansidfixed0
debian debiantrixiefixed0

Package impact
EcosystemPackageVulnerableFixed
java Mavenorg.apache.tomcat:tomcat>=9.0.0.M1,<9.0.0.M29.0.0.M2
java Mavenorg.apache.tomcat:tomcat>=8.0.0.RC1,<8.0.318.0.31
java Mavenorg.apache.tomcat:tomcat>=6.0.0,<6.0.456.0.45

Application impact
VendorProductVersionsFixed
apache apachetomcat6.0.0
apache apachetomcat6.0.1
apache apachetomcat6.0.2
apache apachetomcat6.0.4
apache apachetomcat6.0.10
apache apachetomcat6.0.11
apache apachetomcat6.0.13
apache apachetomcat6.0.14
apache apachetomcat6.0.16
apache apachetomcat6.0.18
apache apachetomcat6.0.20
apache apachetomcat6.0.24
apache apachetomcat6.0.26
apache apachetomcat6.0.28
apache apachetomcat6.0.29
apache apachetomcat6.0.30
apache apachetomcat6.0.32
apache apachetomcat6.0.33
apache apachetomcat6.0.35
apache apachetomcat6.0.36
apache apachetomcat6.0.37
apache apachetomcat6.0.39
apache apachetomcat6.0.41
apache apachetomcat6.0.43
apache apachetomcat6.0.44
apache apachetomcat7.0.0
apache apachetomcat7.0.2
apache apachetomcat7.0.4
apache apachetomcat7.0.5
apache apachetomcat7.0.6
apache apachetomcat7.0.10
apache apachetomcat7.0.11
apache apachetomcat7.0.12
apache apachetomcat7.0.14
apache apachetomcat7.0.16
apache apachetomcat7.0.19
apache apachetomcat7.0.20
apache apachetomcat7.0.21
apache apachetomcat7.0.22
apache apachetomcat7.0.23
apache apachetomcat7.0.25
apache apachetomcat7.0.26
apache apachetomcat7.0.27
apache apachetomcat7.0.28
apache apachetomcat7.0.29
apache apachetomcat7.0.30
apache apachetomcat7.0.32
apache apachetomcat7.0.33
apache apachetomcat7.0.34
apache apachetomcat7.0.35
apache apachetomcat7.0.37
apache apachetomcat7.0.39
apache apachetomcat7.0.40
apache apachetomcat7.0.41
apache apachetomcat7.0.42
apache apachetomcat7.0.47
apache apachetomcat7.0.50
apache apachetomcat7.0.52
apache apachetomcat7.0.53
apache apachetomcat7.0.54
apache apachetomcat7.0.55
apache apachetomcat7.0.56
apache apachetomcat7.0.57
apache apachetomcat7.0.59
apache apachetomcat7.0.61
apache apachetomcat7.0.62
apache apachetomcat7.0.63
apache apachetomcat7.0.64
apache apachetomcat7.0.65
apache apachetomcat7.0.67
apache apachetomcat8.0.0
apache apachetomcat8.0.1
apache apachetomcat8.0.3
apache apachetomcat8.0.11
apache apachetomcat8.0.12
apache apachetomcat8.0.14
apache apachetomcat8.0.15
apache apachetomcat8.0.17
apache apachetomcat8.0.18
apache apachetomcat8.0.20
apache apachetomcat8.0.21
apache apachetomcat8.0.22
apache apachetomcat8.0.23
apache apachetomcat8.0.24
apache apachetomcat8.0.26
apache apachetomcat8.0.27
apache apachetomcat8.0.28
apache apachetomcat8.0.29
apache apachetomcat8.0.30
apache apachetomcat9.0.0

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.