7 matches found
tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API
A flaw was found in Apache Tomcat when configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component. This vulnerability allows authentication bypass via improperly handled exceptions during the authentication process...
9.8CVSS7.3AI score0.06287EPSS
SaveExploits1References5
20