Published: 20/03/2017 Updated: 08/12/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.1 | Impact Score: 3.7 | Exploitability Score: 2.8

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensitive information from requests other then their own.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache tomcat 6.0.33
apache tomcat 6.0.39
apache tomcat 6.0.6
apache tomcat 6.0.11
apache tomcat 6.0.34
apache tomcat 6.0.47
apache tomcat 6.0.22
apache tomcat 6.0.25
apache tomcat 6.0.7
apache tomcat 6.0.4
apache tomcat 6.0.15
apache tomcat 6.0.42
apache tomcat 6.0.44
apache tomcat 6.0.20
apache tomcat 6.0.21
apache tomcat 6.0.10
apache tomcat 6.0.31
apache tomcat 6.0.29
apache tomcat 6.0.3
apache tomcat 6.0.9
apache tomcat 6.0.24
apache tomcat 6.0.38
apache tomcat 6.0.23
apache tomcat 6.0.37
apache tomcat 6.0.17
apache tomcat 6.0.32
apache tomcat 6.0.28
apache tomcat 6.0.0
apache tomcat 6.0.14
apache tomcat 6.0.45
apache tomcat 6.0.41
apache tomcat 6.0.1
apache tomcat 6.0.12
apache tomcat 6.0.18
apache tomcat 6.0.46
apache tomcat 6.0.43
apache tomcat 6.0.5
apache tomcat 6.0.30
apache tomcat 6.0.2
apache tomcat 6.0.13
apache tomcat 6.0.40
apache tomcat 6.0.26
apache tomcat 6.0.19
apache tomcat 6.0.27
apache tomcat 6.0.35
apache tomcat 6.0.16
apache tomcat 6.0.36
apache tomcat 6.0.8
apache tomcat 7.0.49
apache tomcat 7.0.12
apache tomcat 7.0.62
apache tomcat 7.0.53
apache tomcat 7.0.20
apache tomcat 7.0.34
apache tomcat 7.0.58
apache tomcat 7.0.8
apache tomcat 7.0.55
apache tomcat 7.0.1
apache tomcat 7.0.2
apache tomcat 7.0.5
apache tomcat 7.0.51
apache tomcat 7.0.63
apache tomcat 7.0.22
apache tomcat 7.0.39
apache tomcat 7.0.26
apache tomcat 7.0.46
apache tomcat 7.0.72
apache tomcat 7.0.71
apache tomcat 7.0.28
apache tomcat 7.0.59
apache tomcat 7.0.65
apache tomcat 7.0.0
apache tomcat 7.0.50
apache tomcat 7.0.6
apache tomcat 7.0.18
apache tomcat 7.0.14
apache tomcat 7.0.48
apache tomcat 7.0.11
apache tomcat 7.0.67
apache tomcat 7.0.23
apache tomcat 7.0.66
apache tomcat 7.0.44
apache tomcat 7.0.69
apache tomcat 7.0.7
apache tomcat 7.0.52
apache tomcat 7.0.42
apache tomcat 7.0.60
apache tomcat 7.0.37
apache tomcat 7.0.29
apache tomcat 7.0.45
apache tomcat 7.0.68
apache tomcat 7.0.13
apache tomcat 7.0.47
apache tomcat 7.0.41
apache tomcat 7.0.31
apache tomcat 7.0.30
apache tomcat 7.0.15
apache tomcat 7.0.19
apache tomcat 7.0.16
apache tomcat 7.0.10
apache tomcat 7.0.36
apache tomcat 7.0.25
apache tomcat 7.0.54
apache tomcat 7.0.35
apache tomcat 7.0.61
apache tomcat 7.0.57
apache tomcat 7.0.43
apache tomcat 7.0.32
apache tomcat 7.0.38
apache tomcat 7.0.21
apache tomcat 7.0.27
apache tomcat 7.0.24
apache tomcat 7.0.17
apache tomcat 7.0.40
apache tomcat 7.0.9
apache tomcat 7.0.4
apache tomcat 7.0.3
apache tomcat 7.0.56
apache tomcat 7.0.64
apache tomcat 7.0.70
apache tomcat 7.0.33
apache tomcat 8.0.4
apache tomcat 8.0.10
apache tomcat 8.0.30
apache tomcat 8.0.0
apache tomcat 8.0.17
apache tomcat 8.0.7
apache tomcat 8.0.26
apache tomcat 8.0.2
apache tomcat 8.0.20
apache tomcat 8.0.31
apache tomcat 8.0.5
apache tomcat 8.0.1
apache tomcat 8.0.19
apache tomcat 8.0.12
apache tomcat 8.0.27
apache tomcat 8.0.15
apache tomcat 8.0.22
apache tomcat 8.0.29
apache tomcat 8.0.11
apache tomcat 8.0.24
apache tomcat 8.0.36
apache tomcat 8.0.23
apache tomcat 8.0.33
apache tomcat 8.0.6
apache tomcat 8.0.21
apache tomcat 8.0.32
apache tomcat 8.0.25
apache tomcat 8.0.18
apache tomcat 8.0.35
apache tomcat 8.0.3
apache tomcat 8.0.38
apache tomcat 8.0.13
apache tomcat 8.0.14
apache tomcat 8.0.9
apache tomcat 8.0.16
apache tomcat 8.0.8
apache tomcat 8.0.34
apache tomcat 8.0.28
apache tomcat 8.0.37
apache tomcat 8.5.2
apache tomcat 8.5.4
apache tomcat 8.5.0
apache tomcat 8.5.5
apache tomcat 8.5.3
apache tomcat 8.5.6
apache tomcat 8.5.1
apache tomcat 9.0.0

Debian Bug report logs - #845393 CVE-2016-9774: privilege escalation via upgrade Package: tomcat8; Maintainer for tomcat8 is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Source for tomcat8 is src:tomcat8 (PTS, buildd, popcon) Reported by: Paul Szabo <paulszabo@sydneyeduau> Date: Tue, 22 ...

Debian Bug report logs - #845385 CVE-2016-9775: privilege escalation via removal Package: tomcat8; Maintainer for tomcat8 is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Source for tomcat8 is src:tomcat8 (PTS, buildd, popcon) Reported by: Paul Szabo <paulszabo@sydneyeduau> Date: Tue, 22 ...

USN-3177-1 introduced a regression in Tomcat ...

Several security issues were fixed in Tomcat ...

Synopsis Moderate: tomcat security update Type/Severity Security Advisory: Moderate Topic An update for tomcat is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, whic ...

Synopsis Moderate: tomcat6 security update Type/Severity Security Advisory: Moderate Topic An update for tomcat6 is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, wh ...

Synopsis Moderate: Red Hat JBoss Enterprise Application Platform security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat JBoss Enterprise Application PlatformRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulne ...

Synopsis Important: Red Hat JBoss Enterprise Application Platform security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 64 for RHEL 5Red Hat Product Security has rated this update as having a security impact of Importa ...

Synopsis Important: Red Hat JBoss Enterprise Application Platform security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 64 for RHEL 7Red Hat Product Security has rated this update as having a security impact of Importa ...

Synopsis Important: Red Hat JBoss Web Server security and enhancement update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Web ServerRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System ...

Synopsis Important: jboss-ec2-eap security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 64 for RHEL 6Red Hat Product Security has rated this update as having a security impac ...

Synopsis Important: Red Hat JBoss Enterprise Application Platform security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Enterprise Application Platform 64 for RHEL 6Red Hat Product Security has rated this update as having a security impact of Importa ...

Multiple security vulnerabilities were discovered in the Tomcat servlet and JSP engine, as well as in its Debian-specific maintainer scripts Those flaws allowed for privilege escalation, information disclosure, and remote code execution As part of this update, several regressions stemming from incomplete fixes for previous vulnerabilities were al ...

It was discovered that the code that parsed the HTTP request line permitted invalid characters This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response By manipulating the HTTP response the attacker could poison a web-cache, perform a ...

CVE-2016-6816 tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests CVE-2016-8735 tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener ...

It was discovered that the code that parsed the HTTP request line permittedinvalid characters This could be exploited, in conjunction with a proxy thatalso permitted the invalid characters but with a different interpretation, toinject data into the HTTP response By manipulating the HTTP response theattacker could poison a web-cache, perform an XS ...

Multiple vulnerabilities have been found in JP1/Network Node Manager i CVE-2016-6816, CVE-2017-5664 Affected products and versions are listed below Please upgrade your version to the appropriate version ...

# Exploit Title:Apache Tomcat CVE-2016-6816 Security Bypass Vulnerability # Date: 4th March 2017 # Exploit Author: justpentest # Vendor Homepage: tomcatapacheorg # Version: Apache Tomcat 900M1 through 900M11, 850 through 856, 800RC1 through 8038, 700 through 7072 and 600 through 6047 # Contact: transform2secure@gmailcom ...

Apache Tomcat versions 6, 7, 8, and 9 suffer from an information disclosure vulnerability ...

Get Started

CVE-2016-6816

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect