CVE-2016-0714
published 2016-02-25CVE-2016-0714: The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session…
PriorityP359high8.8CVSS 3.0
AVNACLPRLUINSUCHIHAH
EPSS
13.08%
96.3th percentile
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
Affected
106 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
osv8.8HIGH
vendor_apache8.8HIGH
vendor_debian8.8LOW
vendor_redhat8.8HIGH
vendor_ubuntu4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Tomcat vulnerabilities
vendor_ubuntu·2016-07-05·CVSS 4.3
CVE-2015-5174 [MEDIUM] Tomcat vulnerabilities
Title: Tomcat vulnerabilities
Summary: Several security issues were fixed in Tomcat.
It was discovered that Tomcat incorrectly handled pathnames used by web
applications in a getResource, getResourceAsStream, or getResourcePaths
call. A remote attacker could use this issue to possibly list a parent
directory . This issue only affected Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and
Ubuntu 15.10. (CVE-2015-5174)
It was discovered that the Tomcat mapper component incorrectly handled
redirects. A remote attacker could use this issue to determine the
existence of a directory. This issue only affected Ubuntu 12.04 LTS,
Ubuntu 14.04 LTS and Ubuntu 15.10. (CVE-2015-5345)
It was discovered that Tomcat incorrectly handled different session
settings when multiple versions of the same web application was
Red Hat
tomcat: Security Manager bypass via persistence mechanisms
vendor_redhat·2016-02-22·CVSS 8.8
CVE-2016-0714 [HIGH] CWE-290 tomcat: Security Manager bypass via persistence mechanisms
tomcat: Security Manager bypass via persistence mechanisms
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
It was found that several Tomcat session persistence mechanisms could allow a remote, authenticated user to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that placed a crafted object in a session.
Package: jbossweb (Red Hat JBoss BRMS 5) - Will not fix
Package: jbossweb (Red Hat JBoss Data Gr
Debian
CVE-2016-0714: tomcat9 - The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x b...
vendor_debian·2016·CVSS 8.8
CVE-2016-0714 [HIGH] CVE-2016-0714: tomcat9 - The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x b...
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
Apache
Apache tomcat: CVE-2016-0714
vendor_apache·CVSS 8.8
CVE-2016-0714 [HIGH] Apache tomcat: CVE-2016-0714
Apache tomcat: CVE-2016-0714
This issue only affects users running untrusted web applications under a security manager. Tomcat provides several session persistence mechanisms. The StandardManager persists session over a restart. The PersistentManager is able to persist sessions to files, a database or a custom Store . The cluster implementation persists sessions to one or more additional nodes in the cluster. All of these mechanisms could be exploited to bypass a security manager. Session persistence is performed by Tomcat code with the permissions assigned to Tomcat internal code. By placing a carefully crafted object into a session, a malicious web application could trigger the execution of arbitrary code. This was fixed in revisions 1726196 and 1726203 . This issue was identified by the
VulDB
Apache Tomcat 6.0/7.0/8.0/9.0 Session Persistence access control (RHSA-2016:1087 / Nessus ID 88935)
vuldb·2026-10-15·CVSS 8.8
CVE-2016-0714 [HIGH] Apache Tomcat 6.0/7.0/8.0/9.0 Session Persistence access control (RHSA-2016:1087 / Nessus ID 88935)
A vulnerability was found in Apache Tomcat 6.0/7.0/8.0/9.0. It has been classified as critical. This impacts an unknown function of the component Session Persistence Handler. This manipulation causes improper access controls.
The identification of this vulnerability is CVE-2016-0714. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is recommended.
VulDB
Oracle Virtual Desktop Infrastructure up to 3.5.2 Apache Tomcat access control (Nessus ID 90272 / ID 350024)
vuldb·2026-10-15·CVSS 8.8
CVE-2016-0714 [HIGH] Oracle Virtual Desktop Infrastructure up to 3.5.2 Apache Tomcat access control (Nessus ID 90272 / ID 350024)
A vulnerability marked as critical has been reported in Oracle Virtual Desktop Infrastructure up to 3.5.2. This affects an unknown part of the component Apache Tomcat. Performing a manipulation results in improper access controls.
This vulnerability is known as CVE-2016-0714. Remote exploitation of the attack is possible. No exploit is available.
It is suggested to upgrade the affected component.
VulDB
Oracle Transportation Management up to 6.3.7 Install access control (Nessus ID 90274 / ID 350024)
vuldb·2026-10-15·CVSS 8.8
CVE-2016-0714 [HIGH] Oracle Transportation Management up to 6.3.7 Install access control (Nessus ID 90274 / ID 350024)
A vulnerability was found in Oracle Transportation Management up to 6.3.7. It has been rated as critical. The affected element is an unknown function of the component Install. Performing a manipulation results in improper access controls.
This vulnerability is reported as CVE-2016-0714. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is advised.
VulDB
Oracle Communications 12.x Policy Management access control (Nessus ID 90274 / ID 350024)
vuldb·2026-10-15·CVSS 8.8
CVE-2016-0714 [HIGH] Oracle Communications 12.x Policy Management access control (Nessus ID 90274 / ID 350024)
A vulnerability categorized as critical has been discovered in Oracle Communications 12.x. This impacts an unknown function of the component Policy Management. Executing a manipulation can lead to improper access controls.
This vulnerability is registered as CVE-2016-0714. It is possible to launch the attack remotely. No exploit is available.
It is advisable to upgrade the affected component.
VulDB
Oracle MySQL Enterprise Monitor 3.1.4.7895/3.2.1.1049 Monitoring access control (Nessus ID 90274 / ID 350024)
vuldb·2026-10-15·CVSS 8.8
CVE-2016-0714 [HIGH] Oracle MySQL Enterprise Monitor 3.1.4.7895/3.2.1.1049 Monitoring access control (Nessus ID 90274 / ID 350024)
A vulnerability, which was classified as critical, has been found in Oracle MySQL Enterprise Monitor 3.1.4.7895/3.2.1.1049. Impacted is an unknown function of the component Monitoring. The manipulation leads to improper access controls.
This vulnerability is referenced as CVE-2016-0714. Remote exploitation of the attack is possible. No exploit is available.
It is advisable to upgrade the affected component.
VulDB
Oracle WebCenter Sites 11.1.1.8.0 Apache Tomcat access control (Nessus ID 90274 / ID 350024)
vuldb·2026-10-15·CVSS 8.8
CVE-2016-0714 [HIGH] Oracle WebCenter Sites 11.1.1.8.0 Apache Tomcat access control (Nessus ID 90274 / ID 350024)
A vulnerability categorized as critical has been discovered in Oracle WebCenter Sites 11.1.1.8.0. Affected by this vulnerability is an unknown functionality of the component Apache Tomcat. Such manipulation leads to improper access controls.
This vulnerability is listed as CVE-2016-0714. The attack may be performed from remote. There is no available exploit.
It is advisable to upgrade the affected component.
VulDB
Oracle Management Pack for GoldenGate 11.2.1.0.12 Apache Tomcat access control (Nessus ID 90272 / ID 350024)
vuldb·2026-10-15·CVSS 8.8
CVE-2016-0714 [HIGH] Oracle Management Pack for GoldenGate 11.2.1.0.12 Apache Tomcat access control (Nessus ID 90272 / ID 350024)
A vulnerability classified as critical has been found in Oracle Management Pack for GoldenGate 11.2.1.0.12. Affected by this issue is some unknown functionality of the component Apache Tomcat. The manipulation leads to improper access controls.
This vulnerability is referenced as CVE-2016-0714. Remote exploitation of the attack is possible. No exploit is available.
It is recommended to upgrade the affected component.
GHSA
Improper Access Control in Apache Tomcat
ghsa·2022-05-14
CVE-2016-0714 [HIGH] CWE-284 Improper Access Control in Apache Tomcat
Improper Access Control in Apache Tomcat
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
OSV
Improper Access Control in Apache Tomcat
osv·2022-05-14
CVE-2016-0714 [HIGH] Improper Access Control in Apache Tomcat
Improper Access Control in Apache Tomcat
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
OSV
tomcat6, tomcat7 vulnerabilities
osv·2016-07-05·CVSS 4.3
CVE-2015-5174 [MEDIUM] tomcat6, tomcat7 vulnerabilities
tomcat6, tomcat7 vulnerabilities
It was discovered that Tomcat incorrectly handled pathnames used by web
applications in a getResource, getResourceAsStream, or getResourcePaths
call. A remote attacker could use this issue to possibly list a parent
directory . This issue only affected Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and
Ubuntu 15.10. (CVE-2015-5174)
It was discovered that the Tomcat mapper component incorrectly handled
redirects. A remote attacker could use this issue to determine the
existence of a directory. This issue only affected Ubuntu 12.04 LTS,
Ubuntu 14.04 LTS and Ubuntu 15.10. (CVE-2015-5345)
It was discovered that Tomcat incorrectly handled different session
settings when multiple versions of the same web application was deployed. A
remote attacker could possibly use this i
OSV
CVE-2016-0714: The session-persistence implementation in Apache Tomcat 6
osv·2016-02-24·CVSS 8.8
CVE-2016-0714 [HIGH] CVE-2016-0714: The session-persistence implementation in Apache Tomcat 6
The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2015-5351 CVE-2016-0714 CVE-2016-0706 CVE-2015-5345 CVE-2015-5346 CVE-2016-0763 CVE-2016-3092 tomcat: multiple security vulnerabilities [epel-6]
bugzilla·2016-07-01·CVSS 5.3
CVE-2015-5351 [MEDIUM] CVE-2015-5351 CVE-2016-0714 CVE-2016-0706 CVE-2015-5345 CVE-2015-5346 CVE-2016-0763 CVE-2016-3092 tomcat: multiple security vulnerabilities [epel-6]
CVE-2015-5351 CVE-2016-0714 CVE-2016-0706 CVE-2015-5345 CVE-2015-5346 CVE-2016-0763 CVE-2016-3092 tomcat: multiple security vulnerabilities [epel-6]
+++ This bug was initially created as a clone of Bug #1311102 +++
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also me
Bugzilla
CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms
bugzilla·2016-02-23·CVSS 8.8
CVE-2016-0714 [HIGH] CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms
CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms
Tomcat provides several session persistence mechanisms. The
StandardManager persists session over a restart. The PersistentManager
is able to persist sessions to files, a database or a custom Store. The
Cluster implementation persists sessions to one or more additional nodes
in the cluster. All of these mechanisms could be exploited to bypass a
security manager. Session persistence is performed by Tomcat code with
the permissions assigned to Tomcat internal code. By placing a carefully
crafted object into a session, a malicious web application could trigger
the execution of arbitrary code.
External references:
http://seclists.org/bugtraq/2016/Feb/145
Discussion:
Upstream patches:
Tomcat6:
http://svn.apache.org/
Bugzilla
CVE-2015-5174 CVE-2015-5351 CVE-2016-0714 CVE-2016-0706 CVE-2015-5345 CVE-2015-5346 CVE-2016-0763 tomcat: multiple security vulnerabilities [epel-6]
bugzilla·2016-02-23·CVSS 4.3
CVE-2015-5174 [MEDIUM] CVE-2015-5174 CVE-2015-5351 CVE-2016-0714 CVE-2016-0706 CVE-2015-5345 CVE-2015-5346 CVE-2016-0763 tomcat: multiple security vulnerabilities [epel-6]
CVE-2015-5174 CVE-2015-5351 CVE-2016-0714 CVE-2016-0706 CVE-2015-5345 CVE-2015-5346 CVE-2016-0763 tomcat: multiple security vulnerabilities [epel-6]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedp
Bugzilla
CVE-2015-5174 CVE-2015-5351 CVE-2016-0714 CVE-2016-0706 CVE-2015-5345 CVE-2015-5346 CVE-2016-0763 tomcat: multiple security vulnerabilities [fedora-all]
bugzilla·2016-02-23·CVSS 4.3
CVE-2015-5174 [MEDIUM] CVE-2015-5174 CVE-2015-5351 CVE-2016-0714 CVE-2016-0706 CVE-2015-5345 CVE-2015-5346 CVE-2016-0763 tomcat: multiple security vulnerabilities [fedora-all]
CVE-2015-5174 CVE-2015-5351 CVE-2016-0714 CVE-2016-0706 CVE-2015-5345 CVE-2015-5346 CVE-2016-0763 tomcat: multiple security vulnerabilities [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpk
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.htmlhttp://marc.info/?l=bugtraq&m=145974991225029&w=2http://rhn.redhat.com/errata/RHSA-2016-1089.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2045.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2599.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2807.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2808.htmlhttp://seclists.org/bugtraq/2016/Feb/145http://svn.apache.org/viewvc?view=revision&revision=1725263http://svn.apache.org/viewvc?view=revision&revision=1725914http://svn.apache.org/viewvc?view=revision&revision=1726196http://svn.apache.org/viewvc?view=revision&revision=1726203http://svn.apache.org/viewvc?view=revision&revision=1726923http://svn.apache.org/viewvc?view=revision&revision=1727034http://svn.apache.org/viewvc?view=revision&revision=1727166http://svn.apache.org/viewvc?view=revision&revision=1727182http://tomcat.apache.org/security-6.htmlhttp://tomcat.apache.org/security-7.htmlhttp://tomcat.apache.org/security-8.htmlhttp://tomcat.apache.org/security-9.htmlhttp://www.debian.org/security/2016/dsa-3530http://www.debian.org/security/2016/dsa-3552http://www.debian.org/security/2016/dsa-3609http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.htmlhttp://www.securityfocus.com/bid/83327http://www.securitytracker.com/id/1035069http://www.securitytracker.com/id/1037640http://www.ubuntu.com/usn/USN-3024-1https://access.redhat.com/errata/RHSA-2016:1087https://access.redhat.com/errata/RHSA-2016:1088https://bto.bluecoat.com/security-advisory/sa118https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3Ehttps://security.gentoo.org/glsa/201705-09https://security.netapp.com/advisory/ntap-20180531-0001/http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.htmlhttp://marc.info/?l=bugtraq&m=145974991225029&w=2http://rhn.redhat.com/errata/RHSA-2016-1089.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2045.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2599.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2807.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2808.htmlhttp://seclists.org/bugtraq/2016/Feb/145http://svn.apache.org/viewvc?view=revision&revision=1725263http://svn.apache.org/viewvc?view=revision&revision=1725914http://svn.apache.org/viewvc?view=revision&revision=1726196http://svn.apache.org/viewvc?view=revision&revision=1726203http://svn.apache.org/viewvc?view=revision&revision=1726923http://svn.apache.org/viewvc?view=revision&revision=1727034http://svn.apache.org/viewvc?view=revision&revision=1727166http://svn.apache.org/viewvc?view=revision&revision=1727182http://tomcat.apache.org/security-6.htmlhttp://tomcat.apache.org/security-7.htmlhttp://tomcat.apache.org/security-8.htmlhttp://tomcat.apache.org/security-9.htmlhttp://www.debian.org/security/2016/dsa-3530http://www.debian.org/security/2016/dsa-3552http://www.debian.org/security/2016/dsa-3609http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.htmlhttp://www.securityfocus.com/bid/83327http://www.securitytracker.com/id/1035069http://www.securitytracker.com/id/1037640http://www.ubuntu.com/usn/USN-3024-1https://access.redhat.com/errata/RHSA-2016:1087https://access.redhat.com/errata/RHSA-2016:1088https://bto.bluecoat.com/security-advisory/sa118https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3Ehttps://security.gentoo.org/glsa/201705-09https://security.netapp.com/advisory/ntap-20180531-0001/
2016-02-25
Published