Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache Tomcat Permissions Privileges and Access Controls Vulnerability - CVE-2011-2729 - Vulnerability Database
Apache Tomcat

Apache Tomcat Permissions Privileges and Access Controls Vulnerability - CVE-2011-2729

Medium
Reference: CVE-2011-2729
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-2729
Title: Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Overview:

native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons as used in Apache Tomcat 5.5.32 through 5.5.33 6.0.30 through 6.0.32 and 7.0.x before 7.0.20 on Linux does not drop capabilities which allows remote attackers to bypass read permissions for files via a request to an application.