CVE-2016-0763

Public on 2016-02-25

Modified on 2016-03-29

Description

A security manager bypass flaw was found in Tomcat that could allow remote, authenticated users to access arbitrary application data, potentially resulting in a denial of service.

Severity

Medium

See what this means

CVSS v3 Base Score

6.3

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	tomcat7	2016-03-29	ALAS-2016-680
Amazon Linux 1	tomcat8	2016-03-29	ALAS-2016-679

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv2	4.3	AV:A/AC:M/Au:N/C:P/I:P/A:N
Amazon Linux	CVSSv3	6.3	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
NVD	CVSSv2	6.5	AV:N/AC:L/Au:S/C:P/I:P/A:P
NVD	CVSSv3	6.3	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2016-0763 Mitre: CVE-2016-0763