NVD

Id
46902  
Name
CVE-2012-5886  
Description
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-11-17  
Modified Date
2013-08-19  
Seq
2012-5886  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234936 46902 CVE-2012-5886 openSUSE-SU-2012:1700  View
234937 46902 CVE-2012-5886 openSUSE-SU-2012:1701  View
234938 46902 CVE-2012-5886 openSUSE-SU-2013:0147  View
234939 46902 CVE-2012-5886 RHSA-2013:0623  View
234940 46902 CVE-2012-5886 RHSA-2013:0629  View
234941 46902 CVE-2012-5886 RHSA-2013:0631  View
234942 46902 CVE-2012-5886 RHSA-2013:0632  View
234943 46902 CVE-2012-5886 RHSA-2013:0633  View
234944 46902 CVE-2012-5886 RHSA-2013:0640  View
234945 46902 CVE-2012-5886 RHSA-2013:0647  View
234946 46902 CVE-2012-5886 RHSA-2013:0648  View
234947 46902 CVE-2012-5886 RHSA-2013:0726  View
234948 46902 CVE-2012-5886 http://svn.apache.org/viewvc?view=revision&revision=1377807  View
234949 46902 CVE-2012-5886 http://svn.apache.org/viewvc?view=revision&revision=1380829  View
234950 46902 CVE-2012-5886 http://svn.apache.org/viewvc?view=revision&revision=1392248  View
234951 46902 CVE-2012-5886 http://tomcat.apache.org/security-5.html  View
234952 46902 CVE-2012-5886 http://tomcat.apache.org/security-6.html  View
234953 46902 CVE-2012-5886 http://tomcat.apache.org/security-7.html  View
234954 46902 CVE-2012-5886 http://www-01.ibm.com/support/docview.wss?uid=swg21626891  View
234955 46902 CVE-2012-5886 56403  View
234956 46902 CVE-2012-5886 USN-1637-1  View
234957 46902 CVE-2012-5886 tomcat-http-Digest-security-bypass(80407)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29669 JVNDB-2012-005376 Apache Tomcat におけるアクセス制限を回避される脆弱性 Apache Tomcat の HTTP Digest Access Authentication の実装には、セッション状態において、認証されたユーザに関する情報をキャッシュするため、アクセス制限を回避される脆弱性が存在します。 CVE-2012-5886 59124 CVE-2012-5886 46902 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005376.html 2012-11-05 2016-02-16 View