Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:27:08 +0000 certa-2012-avi-706 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Apache Tomcat</span>. Elles permettent à un att… https://cve.radiocsirt.org/vuln/certa-2012-avi-706 certa-2012-avi-706 https://cve.radiocsirt.org/vuln/certa-2012-avi-706 EUVD-2026-111880 https://cve.radiocsirt.org/vuln/euvd-2026-111880 EUVD-2026-111880 https://cve.radiocsirt.org/vuln/euvd-2026-111880 fkie_cve-2012-3546 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3546 <p>org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.</p> <p>org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-3546 GHSA-jgm2-m5cg-f66g — Authentication Bypass in Apache Tomcat https://cve.radiocsirt.org/vuln/ghsa-jgm2-m5cg-f66g <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.</p> https://cve.radiocsirt.org/vuln/ghsa-jgm2-m5cg-f66g gsd-2012-3546 https://cve.radiocsirt.org/vuln/gsd-2012-3546 gsd-2012-3546 https://cve.radiocsirt.org/vuln/gsd-2012-3546 RHSA-2013:0004 — Red Hat Security Advisory: tomcat6 security update https://cve.radiocsirt.org/vuln/rhsa-2013:0004 <p>Web: Bypass of security constraints</p> <p>Web: Bypass of security constraints</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0004