NVD

Id
11322  
Name
CVE-2011-5062  
Description
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-01-14  
Modified Date
2014-03-16  
Seq
2011-5062  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62550 11322 CVE-2011-5062 SUSE-SU-2012:0155  View
62551 11322 CVE-2011-5062 openSUSE-SU-2012:0208  View
62552 11322 CVE-2011-5062 HPSBST02955  View
62553 11322 CVE-2011-5062 RHSA-2012:0074  View
62554 11322 CVE-2011-5062 RHSA-2012:0075  View
62555 11322 CVE-2011-5062 RHSA-2012:0076  View
62556 11322 CVE-2011-5062 RHSA-2012:0077  View
62557 11322 CVE-2011-5062 RHSA-2012:0078  View
62558 11322 CVE-2011-5062 RHSA-2012:0325  View
62559 11322 CVE-2011-5062 http://svn.apache.org/viewvc?view=rev&rev=1087655  View
62560 11322 CVE-2011-5062 http://svn.apache.org/viewvc?view=rev&rev=1158180  View
62561 11322 CVE-2011-5062 http://svn.apache.org/viewvc?view=rev&rev=1159309  View
62562 11322 CVE-2011-5062 http://tomcat.apache.org/security-5.html  View
62563 11322 CVE-2011-5062 http://tomcat.apache.org/security-6.html  View
62564 11322 CVE-2011-5062 http://tomcat.apache.org/security-7.html  View
62565 11322 CVE-2011-5062 DSA-2401  View
62566 11322 CVE-2011-5062 RHSA-2011:1845  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25355 JVNDB-2012-001062 Apache Tomcat の HTTP Digest Access Authentication 実装における完全性保護の要求を回避される脆弱性 Apache Tomcat の HTTP Digest Access Authentication 実装は、qop 値をチェックしないため、完全性保護の要求を回避される脆弱性が存在します。 CVE-2011-5062 52969 CVE-2011-5062 11322 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001062.html 2012-01-14 2016-08-02 View