Description
The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.tomcat:tomcat | >= 5.5.0, < 5.5.29 | 5.5.29 | GHSA-hjfh-7c4v-7q8h |
| Maven | org.apache.tomcat:tomcat | >= 6.0.0, < 6.0.24 | 6.0.24 | GHSA-hjfh-7c4v-7q8h |
References
- 37942 vdb-entry
- 20100124 [SECURITY] CVE-2009-2901 Apache Tomcat insecure partial deploy after failed undeploy mailing-list
- HPSBMA02535 vendor-advisory
- http://svn.apache.org/viewvc?rev=892815&view=rev
- 39317 third-party-advisory
- openSUSE-SU-2012:1700 vendor-advisory
- MDVSA-2010:177 vendor-advisory
- 43310 third-party-advisory
- 1023503 vdb-entry
- APPLE-SA-2010-03-29-1 vendor-advisory
- HPSBOV02762 vendor-advisory
- 38541 third-party-advisory
- MDVSA-2010:176 vendor-advisory
- http://tomcat.apache.org/security-6.html
- 57126 third-party-advisory
- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
- USN-899-1 vendor-advisory
- http://support.apple.com/kb/HT4077
- SUSE-SR:2010:008 vendor-advisory
- openSUSE-SU-2013:0147 vendor-advisory
- 38346 third-party-advisory
- tomcat-autodeploy-security-bypass(55856) vdb-entry
- http://tomcat.apache.org/security-5.html
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- 38316 third-party-advisory
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX mailing-list
- ADV-2010-0213 vdb-entry
- HPSBST02955 vendor-advisory
- http://svn.apache.org/viewvc?rev=902650&view=rev
- openSUSE-SU-2012:1701 vendor-advisory
- [tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- [tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/ mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/ mailing-list