NVD

Id
11324  
Name
CVE-2011-5064  
Description
DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2012-01-14  
Modified Date
2014-03-16  
Seq
2011-5064  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62584 11324 CVE-2011-5064 SUSE-SU-2012:0155  View
62585 11324 CVE-2011-5064 openSUSE-SU-2012:0208  View
62586 11324 CVE-2011-5064 HPSBST02955  View
62587 11324 CVE-2011-5064 RHSA-2012:0074  View
62588 11324 CVE-2011-5064 RHSA-2012:0075  View
62589 11324 CVE-2011-5064 RHSA-2012:0076  View
62590 11324 CVE-2011-5064 RHSA-2012:0077  View
62591 11324 CVE-2011-5064 RHSA-2012:0078  View
62592 11324 CVE-2011-5064 RHSA-2012:0325  View
62593 11324 CVE-2011-5064 http://svn.apache.org/viewvc?view=rev&rev=1087655  View
62594 11324 CVE-2011-5064 http://svn.apache.org/viewvc?view=rev&rev=1158180  View
62595 11324 CVE-2011-5064 http://svn.apache.org/viewvc?view=rev&rev=1159309  View
62596 11324 CVE-2011-5064 http://tomcat.apache.org/security-5.html  View
62597 11324 CVE-2011-5064 http://tomcat.apache.org/security-6.html  View
62598 11324 CVE-2011-5064 http://tomcat.apache.org/security-7.html  View
62599 11324 CVE-2011-5064 DSA-2401  View
62600 11324 CVE-2011-5064 RHSA-2011:1845  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25357 JVNDB-2012-001064 Apache Tomcat の DigestAuthenticator.java における暗号保護機構を回避される脆弱性 Apache Tomcat の HTTP Digest Access Authentication 実装内の DigestAuthenticator.java は、ハードコーディングされたサーバの秘密鍵として Catalina を使用するため、暗号保護機構を回避される脆弱性が存在します。 CVE-2011-5064 52971 CVE-2011-5064 11324 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001064.html 2012-01-14 2016-08-02 View