Lucene search
K

7 matches found

RedHat Linux
RedHat Linux
added 2025/05/13 4:2 p.m.3 views

tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API

A flaw was found in Apache Tomcat when configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component. This vulnerability allows authentication bypass via improperly handled exceptions during the authentication process...

9.8CVSS7.3AI score0.01982EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2025/04/07 5:3 p.m.2 views

tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API

A flaw was found in Apache Tomcat when configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component. This vulnerability allows authentication bypass via improperly handled exceptions during the authentication process...

9.8CVSS7.3AI score0.01982EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2025/04/07 5:1 p.m.3 views

tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API

A flaw was found in Apache Tomcat when configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component. This vulnerability allows authentication bypass via improperly handled exceptions during the authentication process...

9.8CVSS7.3AI score0.01982EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2025/02/14 4:9 a.m.6 views

SUSE CVE-2024-52316

Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component which may throw an exception during the authentication process without explicitly setting an HTTP status to indicate failure, the...

9.8CVSS8.9AI score0.01982EPSS
Exploits1References9
OSV
OSV
added 2024/11/18 12:30 p.m.0 views

GHSA-XCPR-7MR4-H4XQ Apache Tomcat - Authentication Bypass

Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component which may throw an exception during the authentication process without explicitly setting an HTTP status to indicate failure, the...

9.8CVSS7.1AI score0.01982EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2024/11/18 12:30 p.m.27 views

Apache Tomcat - Authentication Bypass

Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component which may throw an exception during the authentication process without explicitly setting an HTTP status to indicate failure, the...

9.8CVSS8.3AI score0.01982EPSS
Exploits1References9Affected Software1
OpenVAS
OpenVAS
added 2024/11/18 12:0 a.m.20 views

Apache Tomcat Authentication Bypass Vulnerability (Nov 2024) - Linux

Apache Tomcat is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

9.8CVSS9.6AI score0.01982EPSS
Exploits1References4
Rows per page
Query Builder