Summary
Tomcat Manager is prone to a remote unauthorized-access vulnerability.
An attacker can exploit this issue to upload and execute arbitrary code, which will facilitate a complete compromise of the affected computer.
Solution
Change or remove the user from tomcat-users.xml
Severity
Classification
-
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Apple Safari RSS Feed Information Disclosure Vulnerability
- 4Images <= 1.7.1 Directory Traversal Vulnerability
- Apple Safari PDF Javascript Security Bypass Bypass Vulnerability
- Atlassian JIRA Privilege Escalation and Multiple Cross Site Scripting Vulnerabilities
- Assesi 'bg' Parameter SQL Injection vulnerability