Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache Tomcat Improper Access Control Vulnerability - CVE-2014-7810 - Vulnerability Database
Apache Tomcat

Apache Tomcat Improper Access Control Vulnerability - CVE-2014-7810

Medium
Reference: CVE-2014-7810
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-7810
Title: Apache Tomcat Improper Access Control Vulnerability
Overview:

The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44 7.x before 7.0.58 and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.