CVE

Id
52975  
CVE No.
CVE-2011-5063  
Status
Candidate  
Description
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.  
Phase
Assigned (20120114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
561325 52975 CVE-2011-5063 CONFIRM:http://svn.apache.org/viewvc?view=rev&rev=1087655  View
561326 52975 CVE-2011-5063 CONFIRM:http://svn.apache.org/viewvc?view=rev&rev=1158180  View
561327 52975 CVE-2011-5063 CONFIRM:http://svn.apache.org/viewvc?view=rev&rev=1159309  View
561328 52975 CVE-2011-5063 CONFIRM:http://tomcat.apache.org/security-5.html  View
561329 52975 CVE-2011-5063 CONFIRM:http://tomcat.apache.org/security-6.html  View
561330 52975 CVE-2011-5063 CONFIRM:http://tomcat.apache.org/security-7.html  View
561331 52975 CVE-2011-5063 DEBIAN:DSA-2401  View
561332 52975 CVE-2011-5063 URL:http://www.debian.org/security/2012/dsa-2401  View
561333 52975 CVE-2011-5063 HP:HPSBST02955  View
561334 52975 CVE-2011-5063 URL:http://marc.info/?l=bugtraq&m=139344343412337&w=2  View
561335 52975 CVE-2011-5063 REDHAT:RHSA-2011:1845  View
561336 52975 CVE-2011-5063 URL:http://www.redhat.com/support/errata/RHSA-2011-1845.html  View
561337 52975 CVE-2011-5063 REDHAT:RHSA-2012:0074  View
561338 52975 CVE-2011-5063 URL:http://rhn.redhat.com/errata/RHSA-2012-0074.html  View
561339 52975 CVE-2011-5063 REDHAT:RHSA-2012:0075  View
561340 52975 CVE-2011-5063 URL:http://rhn.redhat.com/errata/RHSA-2012-0075.html  View
561341 52975 CVE-2011-5063 REDHAT:RHSA-2012:0076  View
561342 52975 CVE-2011-5063 URL:http://rhn.redhat.com/errata/RHSA-2012-0076.html  View
561343 52975 CVE-2011-5063 REDHAT:RHSA-2012:0077  View
561344 52975 CVE-2011-5063 URL:http://rhn.redhat.com/errata/RHSA-2012-0077.html  View
561345 52975 CVE-2011-5063 REDHAT:RHSA-2012:0078  View
561346 52975 CVE-2011-5063 URL:http://rhn.redhat.com/errata/RHSA-2012-0078.html  View
561347 52975 CVE-2011-5063 REDHAT:RHSA-2012:0325  View
561348 52975 CVE-2011-5063 URL:http://rhn.redhat.com/errata/RHSA-2012-0325.html  View
561349 52975 CVE-2011-5063 SUSE:SUSE-SU-2012:0155  View
561350 52975 CVE-2011-5063 URL:http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00002.html  View
561351 52975 CVE-2011-5063 SUSE:openSUSE-SU-2012:0208  View
561352 52975 CVE-2011-5063 URL:http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00006.html  View
561353 52975 CVE-2011-5063 SECUNIA:57126  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25544 JVNDB-2012-001251 Support Incident Tracker におけるクロスサイトリクエストフォージェリの脆弱性 Support Incident Tracker には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2011-5068 52975 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001251.html  View