AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2007-5342

MEDIUM · CVSS 6.4 EPSS 5.16%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-12-27 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.4. It affects Apache.

CVE
CVE-2007-5342
Severity
MEDIUM
CVSS
6.4
EPSS
5.16%
Apache

Original NVD Description

The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.