CVE-2011-2204 in Tomcat
Summary
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
05/31/2011
Disclosure
06/29/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 57795 | Apache Tomcat information disclosure | 200 | Not defined | Official fix | CVE-2011-2204 |