NVD

Id
46901  
Name
CVE-2012-5885  
Description
The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-11-17  
Modified Date
2016-08-22  
Seq
2012-5885  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234911 46901 CVE-2012-5885 openSUSE-SU-2012:1700  View
234912 46901 CVE-2012-5885 openSUSE-SU-2012:1701  View
234913 46901 CVE-2012-5885 openSUSE-SU-2013:0147  View
234914 46901 CVE-2012-5885 HPSBUX02860  View
234915 46901 CVE-2012-5885 SSRT101139  View
234916 46901 CVE-2012-5885 oval:org.mitre.oval:def:19432  View
234917 46901 CVE-2012-5885 RHSA-2013:0623  View
234918 46901 CVE-2012-5885 RHSA-2013:0629  View
234919 46901 CVE-2012-5885 RHSA-2013:0631  View
234920 46901 CVE-2012-5885 RHSA-2013:0632  View
234921 46901 CVE-2012-5885 RHSA-2013:0633  View
234922 46901 CVE-2012-5885 RHSA-2013:0640  View
234923 46901 CVE-2012-5885 RHSA-2013:0647  View
234924 46901 CVE-2012-5885 RHSA-2013:0648  View
234925 46901 CVE-2012-5885 RHSA-2013:0726  View
234926 46901 CVE-2012-5885 http://svn.apache.org/viewvc?view=revision&revision=1377807  View
234927 46901 CVE-2012-5885 http://svn.apache.org/viewvc?view=revision&revision=1380829  View
234928 46901 CVE-2012-5885 http://svn.apache.org/viewvc?view=revision&revision=1392248  View
234929 46901 CVE-2012-5885 http://tomcat.apache.org/security-5.html  View
234930 46901 CVE-2012-5885 http://tomcat.apache.org/security-6.html  View
234931 46901 CVE-2012-5885 http://tomcat.apache.org/security-7.html  View
234932 46901 CVE-2012-5885 http://www-01.ibm.com/support/docview.wss?uid=swg21626891  View
234933 46901 CVE-2012-5885 56403  View
234934 46901 CVE-2012-5885 USN-1637-1  View
234935 46901 CVE-2012-5885 tomcat-replay-security-bypass(80408)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29668 JVNDB-2012-005375 Apache Tomcat におけるアクセス制限を回避される脆弱性 Apache Tomcat の HTTP Digest Access Authentication の実装の replay-countermeasure 機能には、nonce および nc 値の代わりに cnonce 値をトラッキングするため、アクセス制限を回避される脆弱性が存在します。 CVE-2012-5885 59123 CVE-2012-5885 46901 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005375.html 2012-11-05 2016-02-16 View