CVE-2016-5388 - 漏洞详情

CVE-2016-5388 (CNNVD-201607-541)

HIGH

中文标题:

Apache Tomcat 访问控制错误漏洞

英文标题:

Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC...

CVSS分数: 8.1

发布时间: 2016-07-19 01:00:00

漏洞类型: 授权问题

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。 Apache Tomcat 8.x版本至8.5.4版本、7.x版本至7.0.70版本存在访问控制错误漏洞。攻击者利用该漏洞通过HTTP请求中特制的Proxy标头将应用程序的出站HTTP流量重定向到任意代理服务器。

英文描述:

Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388"; in other words, this is not a CVE ID for a vulnerability.

CWE类型:

CWE-284

受影响产品

厂商	产品	版本	版本范围	平台	CPE
redhat	enterprise_linux_desktop	7.0	-	-	`cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*`
redhat	enterprise_linux_hpc_node	7.0	-	-	`cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:::::::*`
redhat	enterprise_linux_hpc_node_eus	7.2	-	-	`cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:::::::*`
redhat	enterprise_linux_server	7.0	-	-	`cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*`
redhat	enterprise_linux_server_aus	7.2	-	-	`cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:::::::*`
redhat	enterprise_linux_server_eus	7.2	-	-	`cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:::::::*`
redhat	enterprise_linux_server_tus	7.2	-	-	`cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:::::::*`
redhat	enterprise_linux_workstation	7.0	-	-	`cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*`
hp	system_management_homepage	*	-	-	`cpe:2.3:a:hp:system_management_homepage::::::::`
redhat	enterprise_linux_desktop	6.0	-	-	`cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*`
redhat	enterprise_linux_hpc_node	6.0	-	-	`cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:::::::*`
redhat	enterprise_linux_server	6.0	-	-	`cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*`
redhat	enterprise_linux_workstation	6.0	-	-	`cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*`
oracle	linux	6	-	-	`cpe:2.3:o:oracle:linux:6:::::::*`
oracle	linux	7	-	-	`cpe:2.3:o:oracle:linux:7:::::::*`
apache	tomcat	*	-	-	`cpe:2.3:a:apache:tomcat::::::::`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）

临时解决方案:

（暂无数据）