NVD

Id
15075  
Name
CVE-2010-3718  
Description
Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2011-02-10  
Modified Date
2016-08-22  
Seq
2010-3718  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84372 15075 CVE-2010-3718 APPLE-SA-2011-10-12-3  View
84373 15075 CVE-2010-3718 SUSE-SR:2011:005  View
84374 15075 CVE-2010-3718 HPSBUX02645  View
84375 15075 CVE-2010-3718 SSRT100627  View
84376 15075 CVE-2010-3718 HPSBUX02860  View
84377 15075 CVE-2010-3718 HPSBST02955  View
84378 15075 CVE-2010-3718 oval:org.mitre.oval:def:12517  View
84379 15075 CVE-2010-3718 oval:org.mitre.oval:def:13969  View
84380 15075 CVE-2010-3718 oval:org.mitre.oval:def:19379  View
84381 15075 CVE-2010-3718 8072  View
84382 15075 CVE-2010-3718 http://support.apple.com/kb/HT5002  View
84383 15075 CVE-2010-3718 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html  View
84384 15075 CVE-2010-3718 http://tomcat.apache.org/security-5.html  View
84385 15075 CVE-2010-3718 http://tomcat.apache.org/security-6.html  View
84386 15075 CVE-2010-3718 http://tomcat.apache.org/security-7.html  View
84387 15075 CVE-2010-3718 DSA-2160  View
84388 15075 CVE-2010-3718 MDVSA-2011:030  View
84389 15075 CVE-2010-3718 RHSA-2011:0791  View
84390 15075 CVE-2010-3718 RHSA-2011:0896  View
84391 15075 CVE-2010-3718 RHSA-2011:0897  View
84392 15075 CVE-2010-3718 RHSA-2011:1845  View
84393 15075 CVE-2010-3718 20110205 [SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions  View
84394 15075 CVE-2010-3718 46177  View
84395 15075 CVE-2010-3718 1025025  View
84396 15075 CVE-2010-3718 tomcat-servletcontect-sec-bypass(65159)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36988 JVNDB-2010-002768 Apache Tomcat におけるワーキングディレクトリ外のファイルを読み書きされる脆弱性 Apache Tomcat は、SecurityManager 内で実行されている間、ServletContext を read-only 属性にさせないため、ワーキングディレクトリ外のファイルを読み書きされる脆弱性が存在します。 CVE-2010-3718 46298 CVE-2010-3718 15075 1.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002768.html 2010-11-12 2015-03-25 View