CVE:CVE-2016-5018
CNNVD:CNNVD-201610-829
Apache Tomcat是美国阿帕奇（Apache）软件基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。
Apache Tomcat中存在安全特征问题漏洞。攻击者可借助恶意的Web应用程序利用该漏洞绕过安全限制。以下版本受到影响：Apache Tomcat 9.0.0.M1至9.0.0.M9版本，8.5.0至8.5.4版本，8.0.0.RC1至8.0.36版本，7.0.0至7.0.70版本，6.0.0至6.0.45版本。
solution:Upgrade apache tomcat to a higher version than 6.0.45,7.0.70,8.0.36,8.5.4,9.0.0:m1,9.0.0:m2,9.0.0:m3,9.0.0:m4,9.0.0:m5,9.0.0:m6,9.0.0:m7,9.0.0:m8,9.0.0:m9,and avoid the version [6.0.0,6.0.45],[7.0.0,7.0.70],[8.0,8.0.36],[8.5.0,8.5.4],9.0.0:m1,9.0.0:m2,9.0.0:m3,9.0.0:m4,9.0.0:m5,9.0.0:m6,9.0.0:m7,9.0.0:m8,9.0.0:m9; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_shift to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade canonical ubuntu_linux to a higher version than 16.04,and avoid the version 16.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat jboss_enterprise_web_server to a higher version than 3.0.0,and avoid the version 3.0.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.4,7.5,7.6,7.7,and avoid the version 7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,7.7,and avoid the version 7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,7.7,and avoid the version 7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle tekelec_platform_distribution to a higher version than 7.7.1,and avoid the version [7.4.0,7.7.1]