Поиск уязвимостей
Количество 29
Количество 29
GHSA-5q6q-ffrq-6xfc
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-68569
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-68569
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-68569
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-68569
Improper Authentication vulnerability in Apache Tomcat meant that in s ...
ROS-20260922-80-0088
Уязвимость tomcat11
ROS-20260922-80-0086
Уязвимость tomcat10
ROS-20260922-80-0085
Уязвимость tomcat
ROS-20260922-73-0063
Уязвимость tomcat11
ROS-20260922-73-0062
Уязвимость tomcat10
ROS-20260922-73-0061
Уязвимость tomcat
BDU:2026-16149
Уязвимость сервера приложений Apache Tomcat, связанная с недостатками процедуры аутентификации, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
RLSA-2026:92869
Important: tomcat security update
ELSA-2026-92869
ELSA-2026-92869: tomcat security update (IMPORTANT)
ELSA-2026-92862
ELSA-2026-92862: tomcat security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:93469
Important: tomcat security update
ELSA-2026-93469
ELSA-2026-93469: tomcat security update (IMPORTANT)
SUSE-SU-2026:4203-1
Security update for tomcat
SUSE-SU-2026:4126-1
Security update for tomcat
SUSE-SU-2026:4119-1
Security update for tomcat10
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-5q6q-ffrq-6xfc Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-68569 Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-68569 Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.2 | 0% Низкий | 2 месяца назад |
 | CVE-2026-68569 Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-68569 Improper Authentication vulnerability in Apache Tomcat meant that in s ... | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
 | ROS-20260922-80-0088 Уязвимость tomcat11 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0086 Уязвимость tomcat10 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0085 Уязвимость tomcat | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0063 Уязвимость tomcat11 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0062 Уязвимость tomcat10 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0061 Уязвимость tomcat | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
 | BDU:2026-16149 Уязвимость сервера приложений Apache Tomcat, связанная с недостатками процедуры аутентификации, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
 | RLSA-2026:92869 Important: tomcat security update | 8 дней назад | ||
| ELSA-2026-92869 ELSA-2026-92869: tomcat security update (IMPORTANT) | 11 дней назад | ||
| ELSA-2026-92862 ELSA-2026-92862: tomcat security, bug fix, and enhancement update (IMPORTANT) | 10 дней назад | ||
| RLSA-2026:93469 Important: tomcat security update | 5 дней назад | ||
| ELSA-2026-93469 ELSA-2026-93469: tomcat security update (IMPORTANT) | 7 дней назад | ||
 | SUSE-SU-2026:4203-1 Security update for tomcat | около 2 месяцев назад | ||
| SUSE-SU-2026:4126-1 Security update for tomcat | около 2 месяцев назад | ||
| SUSE-SU-2026:4119-1 Security update for tomcat10 | около 2 месяцев назад |
Уязвимостей на страницу