Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:14723
HistoryMay 02, 2019 - 4:55 a.m.

Authentication Bypass

2019-05-0204:55:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

tomcat6 is vulnerable to authentication bypass. The vulnerability exists through the ability to perform replay attacks after a nonce becomes stale.

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N