NVD

Id
9021  
Name
CVE-2011-2204  
Description
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-06-29  
Modified Date
2016-08-22  
Seq
2011-2204  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
51815 9021 CVE-2011-2204 APPLE-SA-2012-02-01-1  View
51816 9021 CVE-2011-2204 SSRT100627  View
51817 9021 CVE-2011-2204 SSRT100825  View
51818 9021 CVE-2011-2204 HPSBUX02860  View
51819 9021 CVE-2011-2204 HPSBST02955  View
51820 9021 CVE-2011-2204 oval:org.mitre.oval:def:14931  View
51821 9021 CVE-2011-2204 oval:org.mitre.oval:def:19532  View
51822 9021 CVE-2011-2204 1025712  View
51823 9021 CVE-2011-2204 http://support.apple.com/kb/HT5130  View
51824 9021 CVE-2011-2204 http://tomcat.apache.org/security-5.html  View
51825 9021 CVE-2011-2204 http://tomcat.apache.org/security-6.html  View
51826 9021 CVE-2011-2204 http://tomcat.apache.org/security-7.html  View
51827 9021 CVE-2011-2204 DSA-2401  View
51828 9021 CVE-2011-2204 MDVSA-2011:156  View
51829 9021 CVE-2011-2204 RHSA-2011:1845  View
51830 9021 CVE-2011-2204 48456  View
51831 9021 CVE-2011-2204 tomcat-jmx-info-disclosure(68238)  View
51832 9021 CVE-2011-2204 https://bugzilla.redhat.com/show_bug.cgi?id=717013  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31623 JVNDB-2011-001863 Apache Tomcat における重要な情報を取得される脆弱性 Apache Tomcat は、MemoryUserDatabase が使用される時、JMX のユーザ作成中のエラー発生に際して、パスワードを含むログエントリを作成するために、重要な情報を取得される脆弱性が存在します。 CVE-2011-2204 50111 CVE-2011-2204 9021 1.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001863.html 2011-06-27 2015-03-26 View