Authentication Bypass

Apache Tomcat is vulnerable to Authentication Bypass. The vulnerability is due to improper handling of the upper boundary of the DIGEST authentication replay window, which allows an attacker to replay a previously captured authenticated request once while its nonceCount remains within the replay...