FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

tomcat -- multiple vulnerabilities

Affected packages
	tomcat7	<	7.0.68
	tomcat8	<	8.0.30

Details

VuXML ID	7bbc3016-de63-11e5-8fa8-14dae9d210b8
Discovery	2016-02-22
Entry	2016-02-28

Mark Thomas reports:

CVE-2015-5346 Apache Tomcat Session fixation

CVE-2015-5351 Apache Tomcat CSRF token leak

CVE-2016-0763 Apache Tomcat Security Manager Bypass

[source]

References

CVE Name	CVE-2015-5346
CVE Name	CVE-2015-5351
CVE Name	CVE-2016-0763
URL	http://mail-archives.apache.org/mod_mbox/www-announce/201602.mbox/%3c56CAEF7B.1010901@apache.org%3e
URL	http://mail-archives.apache.org/mod_mbox/www-announce/201602.mbox/%3c56CAEF96.7070701@apache.org%3e
URL	http://mail-archives.apache.org/mod_mbox/www-announce/201602.mbox/%3c56CAEFB2.9030605@apache.org%3e