NVD

Id
10028  
Name
CVE-2011-3376  
Description
org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-05-27  
Published
2011-11-11  
Modified Date
2017-05-22  
Seq
2011-3376  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57515 10028 CVE-2011-3376 http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/core/DefaultInstanceManager.java?r1=1176588&r2=1176587&pathrev=1176588  View
57516 10028 CVE-2011-3376 http://svn.apache.org/viewvc?view=revision&revision=1176588  View
57517 10028 CVE-2011-3376 http://tomcat.apache.org/security-7.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32596 JVNDB-2011-002836 Apache Tomcat における権限を取得される脆弱性 Apache Tomcat の org/apache/catalina/core/DefaultInstanceManager.java は、Manager application の ContainerServlet を適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2011-3376 51283 CVE-2011-3376 10028 4.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002836.html 2011-11-08 2011-11-15 View