CVE-2012-5886 in Tomcat

Resumen (Inglés)

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2012-11-17

Divulgación

2012-11-17

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
6998	Apache Tomcat DIGEST Authentication Session State Caching autenticación débil	287	No probado	Arreglo oficial	CVE-2012-5886

Fuentes

• MITRE
• NVD
• CVE Details