Authentication Bypass

2019-07-0809:44:05

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.01 Low

EPSS

Percentile

84.1%

JSON

geronimo is vulnerable to authentication bypass. A remote attacker is able to bypass authentication to obtain access to Geronimo internals and retrieve confidential information.

CPENameOperatorVersion
geronimo plugins, mejb :: coreeq2.1
geronimo plugins, jetty :: corele2.1
geronimo plugins, tomcat :: corele2.1
geronimo plugins, mejb :: coreeq2.1
geronimo plugins, jetty :: corele2.1
geronimo plugins, tomcat :: corele2.1

Name	Operator	Version
geronimo plugins, mejb :: core	eq	2.1
geronimo plugins, jetty :: core	le	2.1
geronimo plugins, tomcat :: core	le	2.1
geronimo plugins, mejb :: core	eq	2.1
geronimo plugins, jetty :: core	le	2.1
geronimo plugins, tomcat :: core	le	2.1