Количество 7
Количество 7
GHSA-28cq-6rmx-pjq4
Improper Authentication in Apache Tomcat
CVE-2012-5887
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
CVE-2012-5887
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
CVE-2012-5887
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
CVE-2012-5887
The HTTP Digest Access Authentication implementation in Apache Tomcat ...
ELSA-2013-0640
ELSA-2013-0640: tomcat5 security update (IMPORTANT)
ELSA-2013-0623
ELSA-2013-0623: tomcat6 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-28cq-6rmx-pjq4 Improper Authentication in Apache Tomcat | 12% Средний | около 4 лет назад | |
 | CVE-2012-5887 The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests. | CVSS2: 5 | 12% Средний | больше 13 лет назад |
 | CVE-2012-5887 The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests. | CVSS2: 5 | 12% Средний | больше 13 лет назад |
 | CVE-2012-5887 The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests. | CVSS2: 5 | 12% Средний | больше 13 лет назад |
| CVE-2012-5887 The HTTP Digest Access Authentication implementation in Apache Tomcat ... | CVSS2: 5 | 12% Средний | больше 13 лет назад |
| ELSA-2013-0640 ELSA-2013-0640: tomcat5 security update (IMPORTANT) | больше 13 лет назад | ||
| ELSA-2013-0623 ELSA-2013-0623: tomcat6 security update (IMPORTANT) | больше 13 лет назад |
Уязвимостей на страницу