PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2016-6794

CVE-2016-6794

tomcat: system property disclosure

Loading…

Severity

Low

Red Hat Product Security

3.1

CVSS 3.0

Review impact separately from score.

Published · October 27, 2016

Updated · August 5, 2026

Description

It was discovered that when a SecurityManager was configured, Tomcat's system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 3.1
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS 2.0 · 2.6
AV:N/AC:H/Au:N/C:P/I:N/A:N

CWE not specified