Vulnerability in Apache Tomcat
CVE-2016-5388
Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment v…
EPSS: 0.368 (97.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Apache Tomcat
- Hp System_management_homepage
- Oracle Linux — versions 6, 7
- Redhat Enterprise_linux_desktop — versions 7.0, 6.0
- Redhat Enterprise_linux_hpc_node — versions 7.0, 6.0
- Redhat Enterprise_linux_hpc_node_eus — versions 7.2
- Redhat Enterprise_linux_server — versions 7.0, 6.0
- Redhat Enterprise_linux_server_aus — versions 7.2
- Redhat Enterprise_linux_server_eus — versions 7.2
- Redhat Enterprise_linux_server_tus — versions 7.2
Weakness classification (CWE)
Public proof-of-concept exploits
References
- RHSA-2016:1635 (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)
- VU#797896 (x_refsource_CERT-VN, US Government Resource, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)
- RHSA-2016:2045 (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- RHSA-2016:2046 (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
- 91818 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
- openSUSE-SU-2016:2252 (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
Frequently asked questions
- What is CVE-2016-5388?
- CVE-2016-5388 is a high-severity vulnerability in Apache Tomcat, classified under Improper Access Control. CVSS score: 8.1/10. Published 2016-07-19.
- How severe is CVE-2016-5388?
- High severity. CVSS v3 base score is 8.1 out of 10.
- Is CVE-2016-5388 known to be exploited?
- 45 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.