CVE-2016-6794 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-6794 Interim 1 19 2023-03-07T01:58:36Z current 2021-05-30T13:45:00Z 2023-03-07T01:58:36Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-6794 When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00036.html E-Mail link for SUSE-SU-2016:3079-1 https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00038.html E-Mail link for SUSE-SU-2016:3081-1 https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00025.html E-Mail link for SUSE-SU-2017:1632-1 https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00029.html E-Mail link for SUSE-SU-2017:1660-1 https://www.suse.com/support/kb/doc/?id=7010166 E-Mail link for TID7010166 https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00059.html E-Mail link for openSUSE-SU-2016:3129-1 https://lists.opensuse.org/opensuse-security-announce/2016-12/msg00061.html E-Mail link for openSUSE-SU-2016:3144-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 tomcat tomcat-7.0.78-7.13.4 tomcat-8.0.32-10.13.2 tomcat-8.0.36-17.1 tomcat-8.0.43-23.1 tomcat-9.0.12-1.7 tomcat-9.0.21-3.13.2 tomcat-admin-webapps tomcat-admin-webapps-7.0.78-7.13.4 tomcat-admin-webapps-8.0.32-10.13.2 tomcat-admin-webapps-8.0.36-17.1 tomcat-admin-webapps-8.0.43-23.1 tomcat-admin-webapps-9.0.12-1.7 tomcat-admin-webapps-9.0.21-3.13.2 tomcat-docs-webapp tomcat-docs-webapp-7.0.78-7.13.4 tomcat-docs-webapp-8.0.32-10.13.2 tomcat-docs-webapp-8.0.36-17.1 tomcat-docs-webapp-8.0.43-23.1 tomcat-docs-webapp-9.0.12-1.7 tomcat-docs-webapp-9.0.21-3.13.2 tomcat-el-2_2-api-7.0.78-7.13.4 tomcat-el-3_0-api tomcat-el-3_0-api-8.0.32-10.13.2 tomcat-el-3_0-api-8.0.36-17.1 tomcat-el-3_0-api-8.0.43-23.1 tomcat-el-3_0-api-9.0.12-1.7 tomcat-el-3_0-api-9.0.21-3.13.2 tomcat-javadoc tomcat-javadoc-7.0.78-7.13.4 tomcat-javadoc-8.0.32-10.13.2 tomcat-javadoc-8.0.36-17.1 tomcat-javadoc-8.0.43-23.1 tomcat-javadoc-9.0.12-1.7 tomcat-javadoc-9.0.21-3.13.2 tomcat-jsp-2_2-api-7.0.78-7.13.4 tomcat-jsp-2_3-api tomcat-jsp-2_3-api-8.0.32-10.13.2 tomcat-jsp-2_3-api-8.0.36-17.1 tomcat-jsp-2_3-api-8.0.43-23.1 tomcat-jsp-2_3-api-9.0.12-1.7 tomcat-jsp-2_3-api-9.0.21-3.13.2 tomcat-lib tomcat-lib-7.0.78-7.13.4 tomcat-lib-8.0.32-10.13.2 tomcat-lib-8.0.36-17.1 tomcat-lib-8.0.43-23.1 tomcat-lib-9.0.12-1.7 tomcat-lib-9.0.21-3.13.2 tomcat-servlet-3_0-api-7.0.78-7.13.4 tomcat-servlet-3_1-api tomcat-servlet-3_1-api-8.0.32-10.13.2 tomcat-servlet-3_1-api-8.0.36-17.1 tomcat-servlet-3_1-api-8.0.43-23.1 tomcat-servlet-4_0-api-9.0.12-1.7 tomcat-servlet-4_0-api-9.0.21-3.13.2 tomcat-webapps tomcat-webapps-7.0.78-7.13.4 tomcat-webapps-8.0.32-10.13.2 tomcat-webapps-8.0.36-17.1 tomcat-webapps-8.0.43-23.1 tomcat-webapps-9.0.12-1.7 tomcat-webapps-9.0.21-3.13.2 tomcat6-6.0.53-0.56.1 tomcat6-admin-webapps-6.0.53-0.56.1 tomcat6-docs-webapp-6.0.53-0.56.1 tomcat6-javadoc-6.0.53-0.56.1 tomcat6-jsp-2_1-api-6.0.53-0.56.1 tomcat6-lib-6.0.53-0.56.1 tomcat6-servlet-2_5-api-6.0.53-0.56.1 tomcat6-webapps-6.0.53-0.56.1 tomcat-9.0.21-3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat-admin-webapps-9.0.21-3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat-docs-webapp-9.0.21-3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat-el-3_0-api-9.0.21-3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat-javadoc-9.0.21-3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat-jsp-2_3-api-9.0.21-3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat-lib-9.0.21-3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat-servlet-4_0-api-9.0.21-3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat-webapps-9.0.21-3.13.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-admin-webapps-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-docs-webapp-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-el-3_0-api-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-javadoc-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-jsp-2_3-api-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-lib-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-servlet-3_1-api-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-webapps-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-8.0.36-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 tomcat-admin-webapps-8.0.36-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 tomcat-docs-webapp-8.0.36-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 tomcat-el-3_0-api-8.0.36-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 tomcat-javadoc-8.0.36-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 tomcat-jsp-2_3-api-8.0.36-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 tomcat-lib-8.0.36-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 tomcat-servlet-3_1-api-8.0.36-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 tomcat-webapps-8.0.36-17.1 as a component of SUSE Linux Enterprise Server 12 SP2 tomcat-8.0.43-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 tomcat-admin-webapps-8.0.43-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 tomcat-docs-webapp-8.0.43-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 tomcat-el-3_0-api-8.0.43-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 tomcat-javadoc-8.0.43-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 tomcat-jsp-2_3-api-8.0.43-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 tomcat-lib-8.0.43-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 tomcat-servlet-3_1-api-8.0.43-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 tomcat-webapps-8.0.43-23.1 as a component of SUSE Linux Enterprise Server 12 SP3 tomcat-9.0.12-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-admin-webapps-9.0.12-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-docs-webapp-9.0.12-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-el-3_0-api-9.0.12-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-javadoc-9.0.12-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-jsp-2_3-api-9.0.12-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-lib-9.0.12-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-servlet-4_0-api-9.0.12-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-webapps-9.0.12-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-9.0.21-3.13.2 as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-admin-webapps-9.0.21-3.13.2 as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-docs-webapp-9.0.21-3.13.2 as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-el-3_0-api-9.0.21-3.13.2 as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-javadoc-9.0.21-3.13.2 as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-jsp-2_3-api-9.0.21-3.13.2 as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-lib-9.0.21-3.13.2 as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-servlet-4_0-api-9.0.21-3.13.2 as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-webapps-9.0.21-3.13.2 as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-admin-webapps-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-docs-webapp-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-el-2_2-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-javadoc-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-jsp-2_2-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-lib-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-servlet-3_0-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-webapps-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tomcat-admin-webapps-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tomcat-docs-webapp-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tomcat-el-3_0-api-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tomcat-javadoc-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tomcat-jsp-2_3-api-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tomcat-lib-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tomcat-servlet-3_1-api-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tomcat-webapps-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-admin-webapps-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-docs-webapp-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-el-2_2-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-javadoc-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-jsp-2_2-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-lib-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-servlet-3_0-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-webapps-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-admin-webapps-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-docs-webapp-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-el-3_0-api-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-javadoc-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-jsp-2_3-api-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-lib-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-servlet-3_1-api-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-webapps-8.0.32-10.13.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tomcat-admin-webapps-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tomcat-docs-webapp-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tomcat-el-3_0-api-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tomcat-javadoc-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tomcat-jsp-2_3-api-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tomcat-lib-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tomcat-servlet-3_1-api-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tomcat-webapps-8.0.36-17.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tomcat as a component of HPE Helion OpenStack 8 tomcat-admin-webapps as a component of HPE Helion OpenStack 8 tomcat-docs-webapp as a component of HPE Helion OpenStack 8 tomcat-el-3_0-api as a component of HPE Helion OpenStack 8 tomcat-javadoc as a component of HPE Helion OpenStack 8 tomcat-jsp-2_3-api as a component of HPE Helion OpenStack 8 tomcat-lib as a component of HPE Helion OpenStack 8 tomcat-servlet-3_1-api as a component of HPE Helion OpenStack 8 tomcat-webapps as a component of HPE Helion OpenStack 8 tomcat as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-servlet-3_1-api as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat as a component of SUSE Linux Enterprise Server Teradata 12 SP3 tomcat as a component of SUSE OpenStack Cloud 8 tomcat-admin-webapps as a component of SUSE OpenStack Cloud 8 tomcat-docs-webapp as a component of SUSE OpenStack Cloud 8 tomcat-el-3_0-api as a component of SUSE OpenStack Cloud 8 tomcat-javadoc as a component of SUSE OpenStack Cloud 8 tomcat-jsp-2_3-api as a component of SUSE OpenStack Cloud 8 tomcat-lib as a component of SUSE OpenStack Cloud 8 tomcat-servlet-3_1-api as a component of SUSE OpenStack Cloud 8 tomcat-webapps as a component of SUSE OpenStack Cloud 8 tomcat as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-admin-webapps as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-docs-webapp as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-el-3_0-api as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-javadoc as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-jsp-2_3-api as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-lib as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-servlet-3_1-api as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-webapps as a component of SUSE OpenStack Cloud Crowbar 8 When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible. CVE-2016-6794 SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.21-3.13.2 SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.21-3.13.2 SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.21-3.13.2 SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.21-3.13.2 SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.21-3.13.2 SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.21-3.13.2 SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.21-3.13.2 SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.21-3.13.2 SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.21-3.13.2 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 12 SP1:tomcat-8.0.32-10.13.2 SUSE Linux Enterprise Server 12 SP1:tomcat-admin-webapps-8.0.32-10.13.2 SUSE Linux Enterprise Server 12 SP1:tomcat-docs-webapp-8.0.32-10.13.2 SUSE Linux Enterprise Server 12 SP1:tomcat-el-3_0-api-8.0.32-10.13.2 SUSE Linux Enterprise Server 12 SP1:tomcat-javadoc-8.0.32-10.13.2 SUSE Linux Enterprise Server 12 SP1:tomcat-jsp-2_3-api-8.0.32-10.13.2 SUSE Linux Enterprise Server 12 SP1:tomcat-lib-8.0.32-10.13.2 SUSE Linux Enterprise Server 12 SP1:tomcat-servlet-3_1-api-8.0.32-10.13.2 SUSE Linux Enterprise Server 12 SP1:tomcat-webapps-8.0.32-10.13.2 SUSE Linux Enterprise Server 12 SP2:tomcat-8.0.36-17.1 SUSE Linux Enterprise Server 12 SP2:tomcat-admin-webapps-8.0.36-17.1 SUSE Linux Enterprise Server 12 SP2:tomcat-docs-webapp-8.0.36-17.1 SUSE Linux Enterprise Server 12 SP2:tomcat-el-3_0-api-8.0.36-17.1 SUSE Linux Enterprise Server 12 SP2:tomcat-javadoc-8.0.36-17.1 SUSE Linux Enterprise Server 12 SP2:tomcat-jsp-2_3-api-8.0.36-17.1 SUSE Linux Enterprise Server 12 SP2:tomcat-lib-8.0.36-17.1 SUSE Linux Enterprise Server 12 SP2:tomcat-servlet-3_1-api-8.0.36-17.1 SUSE Linux Enterprise Server 12 SP2:tomcat-webapps-8.0.36-17.1 SUSE Linux Enterprise Server 12 SP3:tomcat-8.0.43-23.1 SUSE Linux Enterprise Server 12 SP3:tomcat-admin-webapps-8.0.43-23.1 SUSE Linux Enterprise Server 12 SP3:tomcat-docs-webapp-8.0.43-23.1 SUSE Linux Enterprise Server 12 SP3:tomcat-el-3_0-api-8.0.43-23.1 SUSE Linux Enterprise Server 12 SP3:tomcat-javadoc-8.0.43-23.1 SUSE Linux Enterprise Server 12 SP3:tomcat-jsp-2_3-api-8.0.43-23.1 SUSE Linux Enterprise Server 12 SP3:tomcat-lib-8.0.43-23.1 SUSE Linux Enterprise Server 12 SP3:tomcat-servlet-3_1-api-8.0.43-23.1 SUSE Linux Enterprise Server 12 SP3:tomcat-webapps-8.0.43-23.1 SUSE Linux Enterprise Server 12 SP4:tomcat-9.0.12-1.7 SUSE Linux Enterprise Server 12 SP4:tomcat-admin-webapps-9.0.12-1.7 SUSE Linux Enterprise Server 12 SP4:tomcat-docs-webapp-9.0.12-1.7 SUSE Linux Enterprise Server 12 SP4:tomcat-el-3_0-api-9.0.12-1.7 SUSE Linux Enterprise Server 12 SP4:tomcat-javadoc-9.0.12-1.7 SUSE Linux Enterprise Server 12 SP4:tomcat-jsp-2_3-api-9.0.12-1.7 SUSE Linux Enterprise Server 12 SP4:tomcat-lib-9.0.12-1.7 SUSE Linux Enterprise Server 12 SP4:tomcat-servlet-4_0-api-9.0.12-1.7 SUSE Linux Enterprise Server 12 SP4:tomcat-webapps-9.0.12-1.7 SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.21-3.13.2 SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.21-3.13.2 SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.21-3.13.2 SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.21-3.13.2 SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.21-3.13.2 SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.21-3.13.2 SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.21-3.13.2 SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.21-3.13.2 SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.21-3.13.2 SUSE Linux Enterprise Server 12-LTSS:tomcat-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-admin-webapps-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-docs-webapp-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-el-2_2-api-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-javadoc-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-jsp-2_2-api-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-lib-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-servlet-3_0-api-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-webapps-7.0.78-7.13.4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tomcat-8.0.36-17.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tomcat-admin-webapps-8.0.36-17.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tomcat-docs-webapp-8.0.36-17.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tomcat-el-3_0-api-8.0.36-17.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tomcat-javadoc-8.0.36-17.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tomcat-jsp-2_3-api-8.0.36-17.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tomcat-lib-8.0.36-17.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tomcat-servlet-3_1-api-8.0.36-17.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tomcat-webapps-8.0.36-17.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-admin-webapps-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-docs-webapp-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-el-2_2-api-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-javadoc-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-jsp-2_2-api-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-lib-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-servlet-3_0-api-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-webapps-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.32-10.13.2 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.32-10.13.2 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.32-10.13.2 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.32-10.13.2 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.32-10.13.2 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.32-10.13.2 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.32-10.13.2 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.32-10.13.2 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.32-10.13.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-8.0.36-17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-admin-webapps-8.0.36-17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-docs-webapp-8.0.36-17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-el-3_0-api-8.0.36-17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-javadoc-8.0.36-17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-jsp-2_3-api-8.0.36-17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-lib-8.0.36-17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-servlet-3_1-api-8.0.36-17.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tomcat-webapps-8.0.36-17.1 HPE Helion OpenStack 8:tomcat HPE Helion OpenStack 8:tomcat-admin-webapps HPE Helion OpenStack 8:tomcat-docs-webapp HPE Helion OpenStack 8:tomcat-el-3_0-api HPE Helion OpenStack 8:tomcat-javadoc HPE Helion OpenStack 8:tomcat-jsp-2_3-api HPE Helion OpenStack 8:tomcat-lib HPE Helion OpenStack 8:tomcat-servlet-3_1-api HPE Helion OpenStack 8:tomcat-webapps SUSE Linux Enterprise Server 12 SP2-BCL:tomcat SUSE Linux Enterprise Server 12 SP2-BCL:tomcat-admin-webapps SUSE Linux Enterprise Server 12 SP2-BCL:tomcat-docs-webapp SUSE Linux Enterprise Server 12 SP2-BCL:tomcat-el-3_0-api SUSE Linux Enterprise Server 12 SP2-BCL:tomcat-javadoc SUSE Linux Enterprise Server 12 SP2-BCL:tomcat-jsp-2_3-api SUSE Linux Enterprise Server 12 SP2-BCL:tomcat-lib SUSE Linux Enterprise Server 12 SP2-BCL:tomcat-servlet-3_1-api SUSE Linux Enterprise Server 12 SP2-BCL:tomcat-webapps SUSE Linux Enterprise Server Teradata 12 SP3:tomcat SUSE OpenStack Cloud 8:tomcat SUSE OpenStack Cloud 8:tomcat-admin-webapps SUSE OpenStack Cloud 8:tomcat-docs-webapp SUSE OpenStack Cloud 8:tomcat-el-3_0-api SUSE OpenStack Cloud 8:tomcat-javadoc SUSE OpenStack Cloud 8:tomcat-jsp-2_3-api SUSE OpenStack Cloud 8:tomcat-lib SUSE OpenStack Cloud 8:tomcat-servlet-3_1-api SUSE OpenStack Cloud 8:tomcat-webapps SUSE OpenStack Cloud Crowbar 8:tomcat SUSE OpenStack Cloud Crowbar 8:tomcat-admin-webapps SUSE OpenStack Cloud Crowbar 8:tomcat-docs-webapp SUSE OpenStack Cloud Crowbar 8:tomcat-el-3_0-api SUSE OpenStack Cloud Crowbar 8:tomcat-javadoc SUSE OpenStack Cloud Crowbar 8:tomcat-jsp-2_3-api SUSE OpenStack Cloud Crowbar 8:tomcat-lib SUSE OpenStack Cloud Crowbar 8:tomcat-servlet-3_1-api SUSE OpenStack Cloud Crowbar 8:tomcat-webapps moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N