QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-5063

Back to search

CVE-2011-5063

Published: Jan 14, 2012

Modified: Aug 7, 2024

PUBLISHED

Description

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.

VendorProductVersions

n/a

n/a

affected
n/a

References

DSA-2401
vendor-advisory
x_refsource_DEBIAN
SUSE-SU-2012:0155
vendor-advisory
x_refsource_SUSE
RHSA-2012:0325
vendor-advisory
x_refsource_REDHAT
RHSA-2012:0078
vendor-advisory
x_refsource_REDHAT
RHSA-2011:1845
vendor-advisory
x_refsource_REDHAT
RHSA-2012:0075
vendor-advisory
x_refsource_REDHAT
RHSA-2012:0074
vendor-advisory
x_refsource_REDHAT
57126
third-party-advisory
x_refsource_SECUNIA
openSUSE-SU-2012:0208
vendor-advisory
x_refsource_SUSE
RHSA-2012:0076
vendor-advisory
x_refsource_REDHAT
HPSBST02955
vendor-advisory
x_refsource_HP
RHSA-2012:0077
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now