製品・ソフトウェアに関する情報

JVN脆弱性詳細

Apache Tomcat の org/apache/naming/factory/ResourceLinkFactory.java の setGlobalContext メソッドにおける SecurityManager の制限を回避される脆弱性

タイトル	Apache Tomcat の org/apache/naming/factory/ResourceLinkFactory.java の setGlobalContext メソッドにおける SecurityManager の制限を回避される脆弱性
概要	Apache Tomcat の org/apache/naming/factory/ResourceLinkFactory.java の setGlobalContext メソッドは、ResourceLinkFactory.setGlobalContext の呼び出し元が許可されているかどうかを考慮しないため、SecurityManager の制限を回避され、任意のアプリケーションデータを読み書きされる、またはサービス運用妨害 (アプリケーションの中断) 状態にされる脆弱性が存在します。
想定される影響	リモート認証されたユーザにより、巧妙に細工されたグローバルコンテキストを設定する Web アプリケーションを介して、SecurityManager の制限を回避され、任意のアプリケーションデータを読み書きされる、またはサービス運用妨害 (アプリケーションの中断) 状態にされる可能性があります。
対策	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2016年1月5日0:00
登録日	2016年3月2日15:58
最終更新日	2016年12月5日16:57

CVSS2.0 : 警告
スコア	6.5
ベクター	AV:N/AC:L/Au:S/C:P/I:P/A:P

影響を受けるシステム

Apache Software Foundation

Apache Tomcat 7.0.68 未満の 7.x

Apache Tomcat 8.0.32 未満の 8.x

Apache Tomcat 9.0.0.M3 未満の 9.x

Debian

Debian GNU/Linux

Canonical

Ubuntu

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-0763	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0763
National Vulnerability Database (NVD)
2	CVE-2016-0763	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0763

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html

ベンダー情報

No	名前	URL
Apache Tomcat
1	Fixed in Apache Tomcat 7.0.68	http://tomcat.apache.org/security-7.html
2	Fixed in Apache Tomcat 8.0.32	http://tomcat.apache.org/security-8.html
3	Fixed in Apache Tomcat 9.0.0.M3	http://tomcat.apache.org/security-9.html
Apache-SVN
4	Revision 1725926	http://svn.apache.org/viewvc?view=revision&revision=1725926
5	Revision 1725929	http://svn.apache.org/viewvc?view=revision&revision=1725929
6	Revision 1725931	http://svn.apache.org/viewvc?view=revision&revision=1725931
Debian Security Advisory
7	DSA-3530	http://www.debian.org/security/2016/dsa-3530
8	DSA-3552	http://www.debian.org/security/2016/dsa-3552
9	DSA-3609	http://www.debian.org/security/2016/dsa-3609
HPE Security Bulletin
10	HPSBGN03669	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
11	HPSBOV03615	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05158626
12	HPSBUX03606	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05150442
Oracle Critical Patch Update
13	Oracle Critical Patch Update Advisory - October 2016	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Ubuntu Security Notice
14	USN-3024-1	http://www.ubuntu.com/usn/USN-3024-1

その他

No	名前	URL
JVN
1	JVNVU#94679988	http://jvn.jp/vu/JVNVU94679988/

変更履歴

No	変更内容	変更日
0	[2016年03月02日] 掲載 [2016年06月24日] ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBUX03606) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBOV03615) を追加 [2016年12月05日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - October 2016) を追加ベンダ情報：Canonical (USN-3024-1) を追加ベンダ情報：Debian (DSA-3530) を追加ベンダ情報：Debian (DSA-3552) を追加ベンダ情報：Debian (DSA-3609) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03669) を追加	2018年2月17日10:37

NVD脆弱性情報

CVE-2016-0763

概要	The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context.
公表日	2016年2月25日10:59
登録日	2021年1月26日14:04
最終更新日	2024年11月21日11:42

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*

構成2	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:7.0.2:beta::::::
cpe:2.3:a:apache:tomcat:8.0.30:::::::*
cpe:2.3:a:apache:tomcat:7.0.12:::::::*
cpe:2.3:a:apache:tomcat:7.0.62:::::::*
cpe:2.3:a:apache:tomcat:8.0.17:::::::*
cpe:2.3:a:apache:tomcat:7.0.53:::::::*
cpe:2.3:a:apache:tomcat:7.0.20:::::::*
cpe:2.3:a:apache:tomcat:7.0.34:::::::*
cpe:2.3:a:apache:tomcat:8.0.26:::::::*
cpe:2.3:a:apache:tomcat:7.0.55:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:beta::::::
cpe:2.3:a:apache:tomcat:7.0.63:::::::*
cpe:2.3:a:apache:tomcat:8.0.20:::::::*
cpe:2.3:a:apache:tomcat:7.0.22:::::::*
cpe:2.3:a:apache:tomcat:7.0.39:::::::*
cpe:2.3:a:apache:tomcat:7.0.26:::::::*
cpe:2.3:a:apache:tomcat:7.0.28:::::::*
cpe:2.3:a:apache:tomcat:8.0.1:::::::*
cpe:2.3:a:apache:tomcat:8.0.0:rc3::::::
cpe:2.3:a:apache:tomcat:7.0.59:::::::*
cpe:2.3:a:apache:tomcat:7.0.65:::::::*
cpe:2.3:a:apache:tomcat:7.0.50:::::::*
cpe:2.3:a:apache:tomcat:7.0.6:::::::*
cpe:2.3:a:apache:tomcat:8.0.12:::::::*
cpe:2.3:a:apache:tomcat:7.0.14:::::::*
cpe:2.3:a:apache:tomcat:8.0.27:::::::*
cpe:2.3:a:apache:tomcat:8.0.15:::::::*
cpe:2.3:a:apache:tomcat:7.0.11:::::::*
cpe:2.3:a:apache:tomcat:7.0.67:::::::*
cpe:2.3:a:apache:tomcat:8.0.0:rc1::::::
cpe:2.3:a:apache:tomcat:7.0.23:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:beta::::::
cpe:2.3:a:apache:tomcat:8.0.22:::::::*
cpe:2.3:a:apache:tomcat:8.0.29:::::::*
cpe:2.3:a:apache:tomcat:7.0.52:::::::*
cpe:2.3:a:apache:tomcat:7.0.42:::::::*
cpe:2.3:a:apache:tomcat:7.0.37:::::::*
cpe:2.3:a:apache:tomcat:7.0.29:::::::*
cpe:2.3:a:apache:tomcat:8.0.11:::::::*
cpe:2.3:a:apache:tomcat:8.0.24:::::::*
cpe:2.3:a:apache:tomcat:8.0.0:rc10::::::
cpe:2.3:a:apache:tomcat:8.0.23:::::::*
cpe:2.3:a:apache:tomcat:7.0.47:::::::*
cpe:2.3:a:apache:tomcat:7.0.5:beta::::::
cpe:2.3:a:apache:tomcat:8.0.21:::::::*
cpe:2.3:a:apache:tomcat:7.0.41:::::::*
cpe:2.3:a:apache:tomcat:7.0.30:::::::*
cpe:2.3:a:apache:tomcat:7.0.19:::::::*
cpe:2.3:a:apache:tomcat:7.0.16:::::::*
cpe:2.3:a:apache:tomcat:7.0.10:::::::*
cpe:2.3:a:apache:tomcat:8.0.18:::::::*
cpe:2.3:a:apache:tomcat:7.0.25:::::::*
cpe:2.3:a:apache:tomcat:7.0.54:::::::*
cpe:2.3:a:apache:tomcat:7.0.35:::::::*
cpe:2.3:a:apache:tomcat:7.0.61:::::::*
cpe:2.3:a:apache:tomcat:8.0.3:::::::*
cpe:2.3:a:apache:tomcat:7.0.57:::::::*
cpe:2.3:a:apache:tomcat:8.0.14:::::::*
cpe:2.3:a:apache:tomcat:8.0.0:rc5::::::
cpe:2.3:a:apache:tomcat:7.0.32:::::::*
cpe:2.3:a:apache:tomcat:7.0.21:::::::*
cpe:2.3:a:apache:tomcat:7.0.27:::::::*
cpe:2.3:a:apache:tomcat:7.0.40:::::::*
cpe:2.3:a:apache:tomcat:7.0.56:::::::*
cpe:2.3:a:apache:tomcat:8.0.28:::::::*
cpe:2.3:a:apache:tomcat:7.0.64:::::::*
cpe:2.3:a:apache:tomcat:7.0.33:::::::*
cpe:2.3:a:apache:tomcat:9.0.0:milestone1::::::

構成3	以上	以下	より上	未満
cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:15.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::

関連情報、対策とツール

No	URL	タグ
1	http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179356.html
2	http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179356.html
3	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html
4	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html
5	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html
6	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html
7	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html
8	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html
9	http://rhn.redhat.com/errata/RHSA-2016-1089.html
10	http://rhn.redhat.com/errata/RHSA-2016-1089.html
11	http://rhn.redhat.com/errata/RHSA-2016-2599.html
12	http://rhn.redhat.com/errata/RHSA-2016-2599.html
13	http://rhn.redhat.com/errata/RHSA-2016-2807.html
14	http://rhn.redhat.com/errata/RHSA-2016-2807.html
15	http://rhn.redhat.com/errata/RHSA-2016-2808.html
16	http://rhn.redhat.com/errata/RHSA-2016-2808.html
17	http://seclists.org/bugtraq/2016/Feb/147
18	http://seclists.org/bugtraq/2016/Feb/147
19	http://svn.apache.org/viewvc?view=revision&revision=1725926
20	http://svn.apache.org/viewvc?view=revision&revision=1725926
21	http://svn.apache.org/viewvc?view=revision&revision=1725929
22	http://svn.apache.org/viewvc?view=revision&revision=1725929
23	http://svn.apache.org/viewvc?view=revision&revision=1725931
24	http://svn.apache.org/viewvc?view=revision&revision=1725931
25	http://tomcat.apache.org/security-7.html	Vendor Advisory
26	http://tomcat.apache.org/security-7.html	Vendor Advisory
27	http://tomcat.apache.org/security-8.html	Vendor Advisory
28	http://tomcat.apache.org/security-8.html	Vendor Advisory
29	http://tomcat.apache.org/security-9.html	Vendor Advisory
30	http://tomcat.apache.org/security-9.html	Vendor Advisory
31	http://www.debian.org/security/2016/dsa-3530
32	http://www.debian.org/security/2016/dsa-3530
33	http://www.debian.org/security/2016/dsa-3552
34	http://www.debian.org/security/2016/dsa-3552
35	http://www.debian.org/security/2016/dsa-3609
36	http://www.debian.org/security/2016/dsa-3609
37	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
38	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
39	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
40	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
41	http://www.securityfocus.com/bid/83326
42	http://www.securityfocus.com/bid/83326
43	http://www.securitytracker.com/id/1035069
44	http://www.securitytracker.com/id/1035069
45	http://www.ubuntu.com/usn/USN-3024-1
46	http://www.ubuntu.com/usn/USN-3024-1
47	https://access.redhat.com/errata/RHSA-2016:1087
48	https://access.redhat.com/errata/RHSA-2016:1087
49	https://access.redhat.com/errata/RHSA-2016:1088
50	https://access.redhat.com/errata/RHSA-2016:1088
51	https://bto.bluecoat.com/security-advisory/sa118
52	https://bto.bluecoat.com/security-advisory/sa118
53	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442
54	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442
55	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626
56	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626
57	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
58	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
59	https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
60	https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
61	https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
62	https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
63	https://security.gentoo.org/glsa/201705-09
64	https://security.gentoo.org/glsa/201705-09
65	https://security.netapp.com/advisory/ntap-20180531-0001/
66	https://security.netapp.com/advisory/ntap-20180531-0001/

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html

構成2	以上	以下	より上	未満
cpe:2.3:a:apache:tomcat:7.0.2:beta::::::
cpe:2.3:a:apache:tomcat:8.0.30:::::::*
cpe:2.3:a:apache:tomcat:7.0.12:::::::*
cpe:2.3:a:apache:tomcat:7.0.62:::::::*
cpe:2.3:a:apache:tomcat:8.0.17:::::::*
cpe:2.3:a:apache:tomcat:7.0.53:::::::*
cpe:2.3:a:apache:tomcat:7.0.20:::::::*
cpe:2.3:a:apache:tomcat:7.0.34:::::::*
cpe:2.3:a:apache:tomcat:8.0.26:::::::*
cpe:2.3:a:apache:tomcat:7.0.55:::::::*
cpe:2.3:a:apache:tomcat:7.0.4:beta::::::
cpe:2.3:a:apache:tomcat:7.0.63:::::::*
cpe:2.3:a:apache:tomcat:8.0.20:::::::*
cpe:2.3:a:apache:tomcat:7.0.22:::::::*
cpe:2.3:a:apache:tomcat:7.0.39:::::::*
cpe:2.3:a:apache:tomcat:7.0.26:::::::*
cpe:2.3:a:apache:tomcat:7.0.28:::::::*
cpe:2.3:a:apache:tomcat:8.0.1:::::::*
cpe:2.3:a:apache:tomcat:8.0.0:rc3::::::
cpe:2.3:a:apache:tomcat:7.0.59:::::::*
cpe:2.3:a:apache:tomcat:7.0.65:::::::*
cpe:2.3:a:apache:tomcat:7.0.50:::::::*
cpe:2.3:a:apache:tomcat:7.0.6:::::::*
cpe:2.3:a:apache:tomcat:8.0.12:::::::*
cpe:2.3:a:apache:tomcat:7.0.14:::::::*
cpe:2.3:a:apache:tomcat:8.0.27:::::::*
cpe:2.3:a:apache:tomcat:8.0.15:::::::*
cpe:2.3:a:apache:tomcat:7.0.11:::::::*
cpe:2.3:a:apache:tomcat:7.0.67:::::::*
cpe:2.3:a:apache:tomcat:8.0.0:rc1::::::
cpe:2.3:a:apache:tomcat:7.0.23:::::::*
cpe:2.3:a:apache:tomcat:7.0.0:beta::::::
cpe:2.3:a:apache:tomcat:8.0.22:::::::*
cpe:2.3:a:apache:tomcat:8.0.29:::::::*
cpe:2.3:a:apache:tomcat:7.0.52:::::::*
cpe:2.3:a:apache:tomcat:7.0.42:::::::*
cpe:2.3:a:apache:tomcat:7.0.37:::::::*
cpe:2.3:a:apache:tomcat:7.0.29:::::::*
cpe:2.3:a:apache:tomcat:8.0.11:::::::*
cpe:2.3:a:apache:tomcat:8.0.24:::::::*
cpe:2.3:a:apache:tomcat:8.0.0:rc10::::::
cpe:2.3:a:apache:tomcat:8.0.23:::::::*
cpe:2.3:a:apache:tomcat:7.0.47:::::::*
cpe:2.3:a:apache:tomcat:7.0.5:beta::::::
cpe:2.3:a:apache:tomcat:8.0.21:::::::*
cpe:2.3:a:apache:tomcat:7.0.41:::::::*
cpe:2.3:a:apache:tomcat:7.0.30:::::::*
cpe:2.3:a:apache:tomcat:7.0.19:::::::*
cpe:2.3:a:apache:tomcat:7.0.16:::::::*
cpe:2.3:a:apache:tomcat:7.0.10:::::::*
cpe:2.3:a:apache:tomcat:8.0.18:::::::*
cpe:2.3:a:apache:tomcat:7.0.25:::::::*
cpe:2.3:a:apache:tomcat:7.0.54:::::::*
cpe:2.3:a:apache:tomcat:7.0.35:::::::*
cpe:2.3:a:apache:tomcat:7.0.61:::::::*
cpe:2.3:a:apache:tomcat:8.0.3:::::::*
cpe:2.3:a:apache:tomcat:7.0.57:::::::*
cpe:2.3:a:apache:tomcat:8.0.14:::::::*
cpe:2.3:a:apache:tomcat:8.0.0:rc5::::::
cpe:2.3:a:apache:tomcat:7.0.32:::::::*
cpe:2.3:a:apache:tomcat:7.0.21:::::::*
cpe:2.3:a:apache:tomcat:7.0.27:::::::*
cpe:2.3:a:apache:tomcat:7.0.40:::::::*
cpe:2.3:a:apache:tomcat:7.0.56:::::::*
cpe:2.3:a:apache:tomcat:8.0.28:::::::*
cpe:2.3:a:apache:tomcat:7.0.64:::::::*
cpe:2.3:a:apache:tomcat:7.0.33:::::::*
cpe:2.3:a:apache:tomcat:9.0.0:milestone1::::::