CVE-2016-5388: enterprise linux desktop 7.0, 6.0; +11 more affected products

Affected technology

enterprise linux desktop · 7.0
redhat

enterprise linux hpc node · 7.0
redhat

enterprise linux hpc node eus · 7.2
redhat

enterprise linux server · 7.0
redhat

enterprise linux server aus · 7.2
redhat

enterprise linux server eus · 7.2
redhat

enterprise linux server tus · 7.2
redhat

enterprise linux workstation · 7.0
redhat

system management homepage · through 7.5.5.0 (inclusive)
hp

enterprise linux desktop · 6.0
redhat

enterprise linux hpc node · 6.0
redhat

enterprise linux server · 6.0
redhat

enterprise linux workstation · 6.0
redhat

linux · 6
oracle

linux · 7
oracle

tomcat · from 6.0 (inclusive), through 6.0.45 (inclusive)
apache

tomcat · from 7.0 (inclusive), through 7.0.70 (inclusive)
apache

tomcat · from 8.0 (inclusive), through 8.5.4 (inclusive)
apache

n/a · n/a
Vendor not specified by the source

Description’s affected range: through 7.0.70 and 8.x through 8.5.4

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source says apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NVD’s CVSS 3.0 assessment (base score 8.1/10) rates confidentiality, integrity and availability impact as high.