Description
org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality.
Remediation
References
Related Vulnerabilities
MySQL CVE-2022-21485 Vulnerability (CVE-2022-21485)
WordPress Plugin Car Rental System SQL Injection (3.0)
WordPress Plugin WpPygments Multiple Cross-Site Scripting Vulnerabilities (0.3.2)
Moodle Improper Input Validation Vulnerability (CVE-2012-1168)
Oracle Database Server CVE-2012-0527 Vulnerability (CVE-2012-0527)