|
Tomcat 全系爆绕过安全管理器的漏洞，漏洞编号：CVE-2014-7810 Security Manager Bypass 漏洞严重程度: 一般 受影响版本： - - Apache Tomcat 8.0.0-RC1 to 8.0.15 - - Apache Tomcat 7.0.0 to 7.0.57 - - Apache Tomcat 6.0.0 to 6.0.43 漏洞说明: 恶意的 Web 应用可通过使用表达式语言来绕过 Tomcat 安全管理器的保护，该问题主要是安装一些不受信任的应用程序。 处理方法: - - Upgrade to Apache Tomcat 8.0.17 or later (8.0.16 has the fix but was not released) - - Upgrade to Apache Tomcat 7.0.59 or later (7.0.58 has the fix but was not released) - - Upgrade to Apache Tomcat 6.0.44 or later (责任编辑：IT) |