CVE-2016-6796

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-11 · updated 2026-10-08

Description

A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.

Affected products

Apache Tomcat: from 6.0.0 through 6.0.45; from 7.0.0 through 7.0.70; from 8.0 through 8.0.36; from 8.5.0 through 8.5.4; 9.0.0-milestone1, 9.0.0-milestone2, 9.0.0-milestone3, 9.0.0-milestone4, 9.0.0-milestone5, 9.0.0-milestone6 (+3)
Canonical Ubuntu Linux: 16.04
Debian Linux: 8.0
OnCommand Insight: all versions
NetApp Oncommand Shift: all versions
NetApp Snap Creator Framework: all versions
Oracle Tekelec Platform Distribution: 7.4.0, 7.7.1
RedHat Enterprise Linux Desktop: 7.0
RedHat Enterprise Linux Eus: 7.4, 7.5, 7.6, 7.7
RedHat Enterprise Linux Server: 7.0
RedHat Enterprise Linux Server Aus: 7.4, 7.6, 7.7
RedHat Enterprise Linux Server Tus: 7.6, 7.7
RedHat Enterprise Linux Workstation: 7.0
Red Hat JBoss EAP: 6.4
Red Hat JBoss Enterprise Web Server: 3.0.0

References

Get alerted when CVE-2016-6796 or the next vulnerability affects your stack