Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache Tomcat Permissions Privileges and Access Controls Vulnerability - CVE-2012-3546 - Vulnerability Database
Apache Tomcat

Apache Tomcat Permissions Privileges and Access Controls Vulnerability - CVE-2012-3546

Medium
Reference: CVE-2012-3546
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-3546
Title: Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Overview:

org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30 when FORM authentication is used allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.