CVE-2012-5886 in Tomcat
Сводка (Английский)
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Резервировать
17.11.2012
Раскрытие
17.11.2012
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 6998 | Apache Tomcat DIGEST Authentication Session State Caching слабая аутентификация | 287 | недоказанный | Официальное исправление | CVE-2012-5886 |