CVE-2017-12616

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-12616
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-12616.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-12616
Aliases
Downstream
Related
Published
2017-09-19T13:29:00.487Z
Modified
2026-03-13T22:22:33.470100Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

References

Affected packages

Git / github.com/apache/tomcat

Affected ranges

Type
GIT
Repo
https://github.com/apache/tomcat
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e498667bd7811e846771a852b16ce9f1e524b81b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
72a8a7c601a7bff56723650d5bb1e353d095af3d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
511d6f15e4254f3af12c75e5199b66448342eabf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ba80e64fca2badb0a0630f36969365a32a50808
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
53728ececd4dc0134c2e17de849db53ce08219c9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bc8b8705a9713cbd0232ab2d326d96ceb4aef1ad
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a39288c6eab999452c72af9fd1a0c12b054ca9f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ebe68b8319cbd8c4fa9b629f38b10c09ca38b61
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
04d13f45b4268945a0bee7a56fc4cf3782db0c71
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7b9e8b1024e03903deca4b4cdd52f368463c723b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8b83cefaf2a454706f03f509944ca46103db4d13
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
85cfeb746b8ea0d0e51cc4ced6053075f5460a36
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
de47b464201769870a06764cdd5143a59cd95302
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0002c728a93f7866b8e3ecf00d5a008327acdc66
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c845090723d1118dbce1928f9468e1726b79c3b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ec8e60ab88259d3d51c8651a8f72a7a6b1347885
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9e0d31f12dbd5441097dbec493895ad4e07a6832
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
08611c1dab45979e3e68c25b898f9dcb82888da1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4d09baa427e4f70a3198eb06bae39d3b81d52290
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
892c777b9d5c051dc20aacfefc280ab02dbe2143
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eae5ead3864c4e2d528a874069828c6c12dee8a5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ddd8de1c64ef852caca10ab876fed02cfe827ef1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6e2c7f6227de95874c79f77bafe5ed26dfeb4021
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9f62bc56a0887353e58579153a30c64c5369efdb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f397fe02d89f7a10a7dc6f38f36b61bad04dfdc7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
009cf0448025b6227b026e66f5351f0dcb3dd733
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
68e114cf9fe0a83a888099c084b3036040afa518
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
efa0e79f82f17880c0d7427918bc34a83243dfa6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5e096bfd5a387f057766dc6b5217feae75b08331
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7b373b84f1b80602ed62fb056be7c7ce429a15c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
86ecd2ad87b805992b9e4c2f2317feaab7a1e3fb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
247f896633a8a84e2e389d055980fb90cfebffa1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7cfeba335a41dd3b0e423f12534e5936c461711c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ba53773f48f31de787edb559db38e3e02d7efffd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7e8629b4ff4152ae6285fa184745e9a1382ca440
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fec4a6d1d1f050401aec5c6a3bd0431850472d92
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
37f91884c4cdaee56669c5ffa51b547847b1aa4e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3477614af783b612341fa6bc00c16b32d1791de8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ddf8c1d016b2fe81f923ed3d9628ba63ce4502a5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5f6f258107e7e463cce41187e13474f3c894693e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2b858c0fce0db18ca733b161d7428f2cca214841
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1958059057715d26415839cabad78e685d4d02f1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ad3da1182b0ed370ec233b925c69dcee826a9efe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
506ab576d6e086286b79ca7ddebe679223ec3f9f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
00ad08058c70b08a9c18555e793d3b6da76d10aa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7f5cc05a61f85b195032fb1edef692fca2512d26
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dcd9daab64a7b557b989a1e0001ffaae0254c8bc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
81d3e54a46de226a5a8f11bcc65195cddcc24f96
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bb7683de19c1e441f7f9b986ae5a64a44977b27b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
66a6ce81eaf86fdaeb2e218f985f3de50da53ac0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d70fcee0390d1a82b108979d26a7a397a7418bc7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
810f549234921d7f3af43c1604f523eec27eeacb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7d6e626d03f61ccd6c92e8ea28df12e67d256e6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
47af1012111595546f31d9096a37a839f93caa62
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
feaf3763fb37e4a9176ef46a2c80e34821077884
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
30a7e7f7b48aa5f9f4a559635966d70901b5f51d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d0c85cd043679c7330066306600b32aa03c22ca3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
be7e6137267298d6a7b1b3cd2cb1f3f605f9162b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ab66216975257e473e5bf4e9a7a59254c905c880
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8d84136656655a20287cf2dac6ec7fd047979de5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
20bd21830dfe7864cac78acb1b7c825baa11bd85
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6b77b128188a5ed033da2998ff2f47f65aa4f7f8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f6de6eb5445d266506fcf89d3962a622478c2c6c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a6d2ed3eef40903b661d138ae7c8fbd9790d1928
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7a9d8339c97790213f81b43d91606f38be743617
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
05e76dc1b6edcc2fa87d95de72a8a714267e462d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e0ffdd2535a8cb102c62b5db41170625e9d1bf46
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0b2140180148548e012498e2d7c074fb9d208beb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ff181ab22b2b18e77ab9e0f0c2cfe5cfa59c844c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c1c4a30d1cc369b918ee86c34ee09ff62c7c6ca6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
22a6f7d8e615b6cfca151b70e8893c9324e17cc5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fe0424f91a9f0af2f6422fe83bfaa769d92aa131
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fc5bebc0cc58fcd75f3d5178be49a3abe5ae615f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
12bb2050e3694a795f19395d320f406368f09367
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
73268e886373568fb0c2a150dbbcaf088a2443fb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f136158384862c99e7c37937b26bf299fd192a98
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cbf7381f46f2d8d902562c3cc3147d6d1414d6cb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b44e3136d48b3debdd04b828e4b0e4fb96cc1f5e
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.21"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.22"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.28"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.29"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.34"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.35"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.36"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.37"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.38"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.39"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.40"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.41"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.42"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.43"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.44"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.45"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.46"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.47"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.48"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.49"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.50"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.51"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.54"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.55"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.56"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.57"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.58"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.59"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.60"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.61"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.62"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.63"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.64"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.65"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.66"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.67"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.68"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.69"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.70"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.71"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.72"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.73"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.74"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.75"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.76"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.77"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.79"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0.80"
        }
    ]
}

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0.0-beta"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0.2-beta"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0.4-beta"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0.5-beta"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-12616.json"