CVE-2015-5351: CSRF
The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a CSRF protection mechanism by using a token.
Other sources
The index page of the Manager and Host Manager applications included a valid CSRF token when issuing a redirect as a result of an unauthenticated request to the root of the web application. This token could then be used by an attacker to construct a CSRF attack.
External references:
http://seclists.org/bugtraq/2016/Feb/148
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5351?
CVE-2015-5351 is classified as a medium severity vulnerability that poses a risk of remote attacks allowing CSRF token bypass.
How do I fix CVE-2015-5351?
To remediate CVE-2015-5351, upgrade Apache Tomcat to version 7.0.68, 8.0.31, or 9.0.0.M2 or later.
What versions are affected by CVE-2015-5351?
CVE-2015-5351 affects Apache Tomcat versions before 7.0.68, 8.0.31, and 9.0.0.M2.
Is CVE-2015-5351 applicable to all Apache Tomcat installations?
No, CVE-2015-5351 specifically impacts installations of Apache Tomcat versions below the mentioned thresholds.
What impact does CVE-2015-5351 have on system security?
CVE-2015-5351 allows attackers to bypass CSRF protection mechanisms, potentially compromising the application's integrity.