NVD

Id
84692  
Name
CVE-2017-5648  
Description
While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was therefore possible for that untrusted application to retain a reference to the request or response object and thereby access and/or modify information associated with another web application.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-07-18  
Published
2017-04-17  
Modified Date
2017-07-10  
Seq
2017-5648  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
417443 84692 CVE-2017-2465 97130  View
417444 84692 CVE-2017-2465 https://support.apple.com/HT207600  View
417445 84692 CVE-2017-2465 https://support.apple.com/HT207601  View
417446 84692 CVE-2017-2465 https://support.apple.com/HT207617  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66771 JVNDB-2017-003096 Apache Tomcat におけるアクセス制御に関する脆弱性 Apache Tomcat には、アクセス制御に関する脆弱性が存在します。 CVE-2017-5648 0 CVE-2017-5648 84692 6.4 9.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003096.html 2017-04-11 2017-05-15 View