Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache Tomcat Improper Authentication Vulnerability - CVE-2012-5886 - Vulnerability Database
Apache Tomcat

Apache Tomcat Improper Authentication Vulnerability - CVE-2012-5886

Medium
Reference: CVE-2012-5886
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-5886
Title: Apache Tomcat Improper Authentication Vulnerability
Overview:

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36 6.x before 6.0.36 and 7.x before 7.0.30 caches information about the authenticated user within the session state which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.