CVE-2011-2204 in Tomcat

Resumen (Inglés)

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2011-05-31

Divulgación

2011-06-29

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
57795	Apache Tomcat divulgación de información	200	No está definido	Arreglo oficial	CVE-2011-2204

Fuentes

• MITRE
• NVD
• CVE Details