CVE-2011-5034

CVE-2011-5034 affects Apache Geronimo 2.2.1 and earlier, where hash values for form parameters can trigger collisions, enabling a remote attacker to cause CPU exhaustion (DoS) by sending many crafted parameters. The linked IBM/QRadar entries confirm the association of this CVE with Jetty-based co...

CVE-2007-5797

Apache Geronimo 2.0–2.1 is affected by CVE-2007-5797 due to a SQLLoginModule/LoginModule path that does not throw an exception for a nonexistent username. This results in remote authentication bypass, permitting a login attempt with any username not in the database to succeed. The concrete descri...