QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-5062

Back to search

CVE-2011-5062

Published: Jan 14, 2012

Modified: Aug 7, 2024

PUBLISHED

Description

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184.

VendorProductVersions

n/a

n/a

affected
n/a

References

DSA-2401
vendor-advisory
x_refsource_DEBIAN
SUSE-SU-2012:0155
vendor-advisory
x_refsource_SUSE
RHSA-2012:0325
vendor-advisory
x_refsource_REDHAT
RHSA-2012:0078
vendor-advisory
x_refsource_REDHAT
RHSA-2011:1845
vendor-advisory
x_refsource_REDHAT
RHSA-2012:0075
vendor-advisory
x_refsource_REDHAT
RHSA-2012:0074
vendor-advisory
x_refsource_REDHAT
57126
third-party-advisory
x_refsource_SECUNIA
openSUSE-SU-2012:0208
vendor-advisory
x_refsource_SUSE
RHSA-2012:0076
vendor-advisory
x_refsource_REDHAT
HPSBST02955
vendor-advisory
x_refsource_HP
RHSA-2012:0077
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now