CVE-2021-30640

🗓️ 12 Jul 2021 14:55:13Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 732 Views

Apache Tomcat JNDI Realm vulnerability allows authentication bypas

Reporter	Title	Published	Views	Family All 180
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2021-30640	25 Jan 202207:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Build is affected by CVE-2021-30640	9 Feb 202216:08	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2021-30640)	24 Aug 202110:04	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains packages that have multiple vulnerabilities	1 Apr 202216:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge is affected by Apache Tomcat version used in it. (CVE-2021-30640)	7 Jul 202216:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	11 Oct 202118:12	–	ibm
Tenable Nessus	Apache Tomcat < 10.0.6 Vulnerability	12 Jul 202100:00	–	nessus
Tenable Nessus	Apache Tomcat < 8.5.66 Vulnerability	12 Jul 202100:00	–	nessus
Tenable Nessus	Apache Tomcat < 9.0.46 Vulnerability	12 Jul 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-007)	27 Sep 202300:00	–	nessus

NVD

Vulners

Node

apache tomcatRange7.0.0–7.0.109

apache tomcatRange8.5.0–8.5.66

apache tomcatRange9.0.0–9.0.46

apache tomcatRange10.0.0–10.0.6

Node

oracle communications_cloud_native_core_policyMatch1.14.0

oracle communications_diameter_signaling_routerRange8.0.0–8.5.0

oracle communications_pricing_design_centerMatch12.0.0.3.0

oracle hospitality_cruise_shipboard_property_management_systemMatch20.1.0

oracle tekelec_platform_distributionRange7.4.0–7.7.1

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

[
  {
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Tomcat 10 10.0.0-M1 to 10.0.5"
      },
      {
        "status": "affected",
        "version": "Apache Tomcat 9 9.0.0.M1 to 9.0.45"
      },
      {
        "status": "affected",
        "version": "Apache Tomcat 8.5 8.5.0 to 8.5.65"
      },
      {
        "status": "affected",
        "version": "Apache Tomcat 7 7.0.0 to 7.0.108"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com//security-alerts/cpujul2021.html
security	www.security.netapp.com/advisory/ntap-20210827-0007/
lists	www.lists.apache.org/thread.html/r59f9ef03929d32120f91f4ea7e6e79edd5688d75d0a9b65fd26d1fe8%40%3Cannounce.tomcat.apache.org%3E
security	www.security.gentoo.org/glsa/202208-34
debian	www.debian.org/security/2021/dsa-4952
lists	www.lists.debian.org/debian-lts-announce/2021/08/msg00009.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
debian	www.debian.org/security/2021/dsa-4986
oracle	www.oracle.com/security-alerts/cpuoct2021.html

21 Nov 2024 06:04Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25.8

CVSS 3.16.5

EPSS0.00123

CWE-116