CVE-2014-7810 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-7810 Interim 1 21 2024-07-27T01:20:55Z current 2021-05-30T13:23:17Z 2024-07-27T01:20:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-7810 The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-July/001506.html E-Mail link for SUSE-SU-2015:1281-1 https://lists.suse.com/pipermail/sle-security-updates/2015-August/001523.html E-Mail link for SUSE-SU-2015:1337-1 https://lists.suse.com/pipermail/sle-security-updates/2015-September/001594.html E-Mail link for SUSE-SU-2015:1565-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 tomcat-7.0.54-8.el7_2 tomcat-7.0.55-8.2 tomcat-admin-webapps-7.0.54-8.el7_2 tomcat-admin-webapps-7.0.55-8.2 tomcat-docs-webapp-7.0.54-8.el7_2 tomcat-docs-webapp-7.0.55-8.2 tomcat-el-2.2-api-7.0.54-8.el7_2 tomcat-el-2_2-api-7.0.55-8.2 tomcat-javadoc-7.0.54-8.el7_2 tomcat-javadoc-7.0.55-8.2 tomcat-jsp-2.2-api-7.0.54-8.el7_2 tomcat-jsp-2_2-api-7.0.55-8.2 tomcat-jsvc-7.0.54-8.el7_2 tomcat-lib-7.0.54-8.el7_2 tomcat-lib-7.0.55-8.2 tomcat-servlet-3.0-api-7.0.54-8.el7_2 tomcat-servlet-3_0-api-7.0.55-8.2 tomcat-webapps-7.0.54-8.el7_2 tomcat-webapps-7.0.55-8.2 tomcat6 tomcat6-6.0.41-0.45.1 tomcat6-6.0.41-0.47.1 tomcat6-admin-webapps-6.0.41-0.45.1 tomcat6-admin-webapps-6.0.41-0.47.1 tomcat6-docs-webapp-6.0.41-0.45.1 tomcat6-docs-webapp-6.0.41-0.47.1 tomcat6-javadoc-6.0.41-0.45.1 tomcat6-javadoc-6.0.41-0.47.1 tomcat6-jsp-2_1-api-6.0.41-0.45.1 tomcat6-jsp-2_1-api-6.0.41-0.47.1 tomcat6-lib-6.0.41-0.45.1 tomcat6-lib-6.0.41-0.47.1 tomcat6-servlet-2_5-api-6.0.41-0.45.1 tomcat6-servlet-2_5-api-6.0.41-0.47.1 tomcat6-webapps-6.0.41-0.45.1 tomcat6-webapps-6.0.41-0.47.1 tomcat-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-admin-webapps-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-docs-webapp-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-el-2.2-api-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-javadoc-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-jsp-2.2-api-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-jsvc-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-lib-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-servlet-3.0-api-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-webapps-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-admin-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-docs-webapp-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-javadoc-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-jsp-2_1-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-lib-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-servlet-2_5-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat-7.0.55-8.2 as a component of SUSE Linux Enterprise Server 12 tomcat-admin-webapps-7.0.55-8.2 as a component of SUSE Linux Enterprise Server 12 tomcat-docs-webapp-7.0.55-8.2 as a component of SUSE Linux Enterprise Server 12 tomcat-el-2_2-api-7.0.55-8.2 as a component of SUSE Linux Enterprise Server 12 tomcat-javadoc-7.0.55-8.2 as a component of SUSE Linux Enterprise Server 12 tomcat-jsp-2_2-api-7.0.55-8.2 as a component of SUSE Linux Enterprise Server 12 tomcat-lib-7.0.55-8.2 as a component of SUSE Linux Enterprise Server 12 tomcat-servlet-3_0-api-7.0.55-8.2 as a component of SUSE Linux Enterprise Server 12 tomcat-webapps-7.0.55-8.2 as a component of SUSE Linux Enterprise Server 12 tomcat6-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-admin-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-docs-webapp-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-javadoc-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-jsp-2_1-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-lib-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-servlet-2_5-api-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-webapps-6.0.41-0.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 tomcat6-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-admin-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-docs-webapp-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-javadoc-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-jsp-2_1-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-lib-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-servlet-2_5-api-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-webapps-6.0.41-0.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat-7.0.55-8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-admin-webapps-7.0.55-8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-docs-webapp-7.0.55-8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-el-2_2-api-7.0.55-8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-javadoc-7.0.55-8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-jsp-2_2-api-7.0.55-8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-lib-7.0.55-8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-servlet-3_0-api-7.0.55-8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-webapps-7.0.55-8.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat6 as a component of SUSE Linux Enterprise Server 11 SP4 LTSS The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation. CVE-2014-7810 SUSE Liberty Linux 7:tomcat-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-admin-webapps-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-docs-webapp-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-el-2.2-api-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-javadoc-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-jsp-2.2-api-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-jsvc-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-lib-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-servlet-3.0-api-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-webapps-7.0.54-8.el7_2 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server 12:tomcat-7.0.55-8.2 SUSE Linux Enterprise Server 12:tomcat-admin-webapps-7.0.55-8.2 SUSE Linux Enterprise Server 12:tomcat-docs-webapp-7.0.55-8.2 SUSE Linux Enterprise Server 12:tomcat-el-2_2-api-7.0.55-8.2 SUSE Linux Enterprise Server 12:tomcat-javadoc-7.0.55-8.2 SUSE Linux Enterprise Server 12:tomcat-jsp-2_2-api-7.0.55-8.2 SUSE Linux Enterprise Server 12:tomcat-lib-7.0.55-8.2 SUSE Linux Enterprise Server 12:tomcat-servlet-3_0-api-7.0.55-8.2 SUSE Linux Enterprise Server 12:tomcat-webapps-7.0.55-8.2 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-admin-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-docs-webapp-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-javadoc-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-jsp-2_1-api-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-lib-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-servlet-2_5-api-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:tomcat6-webapps-6.0.41-0.45.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.41-0.47.1 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-7.0.55-8.2 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-admin-webapps-7.0.55-8.2 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-docs-webapp-7.0.55-8.2 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-el-2_2-api-7.0.55-8.2 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-javadoc-7.0.55-8.2 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-jsp-2_2-api-7.0.55-8.2 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-lib-7.0.55-8.2 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-servlet-3_0-api-7.0.55-8.2 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-webapps-7.0.55-8.2 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N