Lucene search
RootSSV:60828HistoryJun 06, 2013 - 12:00 a.m.
Apache Tomcat表单验证功能安全绕过漏洞
2013-06-0600:00:00
Root
www.seebug.org
48
0.01 Low
EPSS
Percentile
81.7%
CVE ID: CVE-2013-2067
Apache Tomcat是一款开放源码的JSP应用服务器程序
Apache Tomcat表单验证功能中的java/org/apache/catalina/authenticator/FormAuthenticator.java不正确处理验证需求和会话之前的关系，允许远程攻击者ilyong漏洞在完成登录表单过程中对已验证资源发送请求，可把请求注入到会话中，使用目标验证凭据执行该请求。此漏洞是会话固定攻击的一个变种
0
Apache Tomcat 6.0.21 - 6.0.36
Apache Tomcat 7.x
厂商解决方案
Apache Tomcat 7.0.33已经修复此漏洞，建议用户下载更新：
http://tomcat.apache.org/
Related
securityvulns
securityvulns
[SECURITY] CVE-2013-2067 Session fixation with FORM authenticator
2013-05-10 00:00:00
Apache Tomcat security vulnerabilities
2013-05-10 00:00:00
nessus
nessus
Apache Tomcat 7.0.x < 7.0.33 Session Fixation
2013-05-15 00:00:00
Oracle Linux 6 : tomcat6 (ELSA-2013-0964)
2013-07-12 00:00:00
RHEL 6 : tomcat6 (RHSA-2013:0964)
2013-06-21 00:00:00
cve
cve
CVE-2013-2067
2013-06-01 14:21:00
github
github
Improper Authentication in Apache Tomcat
2022-05-14 01:10:35
openvas
openvas
RedHat Update for tomcat6 RHSA-2013:0964-01
2013-06-24 00:00:00
RedHat Update for tomcat6 RHSA-2013:0964-01
2013-06-24 00:00:00
CentOS Update for tomcat6 CESA-2013:0964 centos6
2013-06-24 00:00:00
veracode
veracode
Session Fixation During Completion Of The Login Form
2019-01-15 08:55:05
tomcat
tomcat
Fixed in Apache Tomcat 7.0.33
2012-11-21 00:00:00
Fixed in Apache Tomcat 6.0.37
2013-05-03 00:00:00
redhat
redhat
(RHSA-2013:0964) Moderate: tomcat6 security update
2013-06-20 00:00:00
(RHSA-2013:1011) Moderate: Red Hat JBoss Web Server 2.0.1 update
2013-07-03 00:00:00
(RHSA-2013:1012) Moderate: Red Hat JBoss Web Server 2.0.1 update
2013-07-03 15:40:17
oraclelinux
oraclelinux
tomcat6 security update
2013-06-20 00:00:00
osv
osv
Improper Authentication in Apache Tomcat
2022-05-14 01:10:35
tomcat7 - security update
2014-04-08 00:00:00
tomcat6 - several
2013-07-18 00:00:00
prion
prion
Session fixation
2013-06-01 14:21:00
debiancve
debiancve
CVE-2013-2067
2013-06-01 14:21:00
ubuntucve
ubuntucve
CVE-2013-2067
2013-05-10 00:00:00
centos
centos
tomcat6 security update
2013-06-20 17:46:38
atlassian
atlassian
Upgrade bundled Tomcat due to security vulnerabilities
2013-05-21 04:29:40
Upgrade bundled Tomcat due to security vulnerabilities
2013-05-21 04:29:40
Upgrade bundled Tomcat to 6.0.37
2013-05-21 00:23:31
seebug
seebug
HP Service Manager多个安全漏洞
2014-02-25 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2013-05-28 00:00:00
mageia
mageia
Updated tomcat6 packages fix multiple vulnerabilities and logging
2014-02-17 22:13:24
debian
debian
[SECURITY] [DSA 2897-1] tomcat7 security update
2014-04-08 18:25:14
[SECURITY] [DSA 2725-1] tomcat6 security update
2013-07-18 17:58:50
f5
f5
K20038622 : Multiple Apache Tomcat vulnerabilities
2020-08-06 00:00:00
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2014-12-15 00:00:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00