Most recent entries from all

cnvd-2016-09607

2026-10-03T03:24:43.606507+00:00

cnvd-2016-09607

EUVD-2026-85746

2026-10-03T03:24:43.606547+00:00

EUVD-2026-85746

fkie_cve-2016-6325

2026-10-03T03:24:43.606560+00:00

The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat and (2) /etc/tomcat/tomcat.conf, which allows local users to gain privileges by leveraging membership in the tomcat group.

GHSA-398j-w8vh-r865

2026-10-03T03:24:43.606591+00:00

gsd-2016-6325

2026-10-03T03:24:43.606606+00:00

gsd-2016-6325

RHSA-2016:2045 — Red Hat Security Advisory: tomcat6 security and bug fix update

2026-10-03T03:24:43.606617+00:00

tomcat: URL Normalization issue tomcat: directory disclosure tomcat: security manager bypass via StatusManagerServlet tomcat: Security Manager bypass via persistence mechanisms Tomcat: CGI sets environmental variable based on user supplied Proxy request header tomcat: tomcat writable config files allow privilege escalation

RHSA-2016:2046 — Red Hat Security Advisory: tomcat security update

2026-10-03T03:24:43.606642+00:00

Tomcat/JbossWeb: security manager bypass via EL expressions tomcat: Session fixation Tomcat: CGI sets environmental variable based on user supplied Proxy request header tomcat: Local privilege escalation via systemd-tmpfiles service tomcat: tomcat writable config files allow privilege escalation