Vulnerability Description
Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application in a getResource, getResourceAsStream, or getResourcePaths call, as demonstrated by the $CATALINA_BASE/webapps directory.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | Debian Linux | 7.0 |
| Apache | Tomcat | 6.0.0 |
| Canonical | Ubuntu Linux | 12.04 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00082.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html
- http://marc.info/?l=bugtraq&m=145974991225029&w=2
- http://packetstormsecurity.com/files/135883/Apache-Tomcat-Limited-Directory-Trav
- http://rhn.redhat.com/errata/RHSA-2016-1435.html
- http://rhn.redhat.com/errata/RHSA-2016-2045.html
- http://rhn.redhat.com/errata/RHSA-2016-2599.html
- http://seclists.org/bugtraq/2016/Feb/149
- http://svn.apache.org/viewvc?view=revision&revision=1696281
- http://svn.apache.org/viewvc?view=revision&revision=1696284
- http://svn.apache.org/viewvc?view=revision&revision=1700897
- http://svn.apache.org/viewvc?view=revision&revision=1700898
- http://svn.apache.org/viewvc?view=revision&revision=1700900
FAQ
What is CVE-2015-5174?
CVE-2015-5174 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager ...
How severe is CVE-2015-5174?
CVE-2015-5174 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-5174?
Check the references section above for vendor advisories and patch information. Affected products include: Debian Debian Linux, Apache Tomcat, Canonical Ubuntu Linux.