https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:18:56 +0000 https://cve.radiocsirt.org/vuln/certa-2013-avi-334 certa-2013-avi-334 https://cve.radiocsirt.org/vuln/certa-2013-avi-334 https://cve.radiocsirt.org/vuln/euvd-2026-105890 EUVD-2026-105890 https://cve.radiocsirt.org/vuln/euvd-2026-105890 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2067 <p>java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.</p> <p>java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-2067 https://cve.radiocsirt.org/vuln/ghsa-6m48-jxwx-76q7 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.</p> https://cve.radiocsirt.org/vuln/ghsa-6m48-jxwx-76q7 https://cve.radiocsirt.org/vuln/gsd-2013-2067 gsd-2013-2067 https://cve.radiocsirt.org/vuln/gsd-2013-2067 https://cve.radiocsirt.org/vuln/rhsa-2013:0833 <p>Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks openssl: DoS due to improper handling of OCSP response verification SSL/TLS: CBC padding timing attack (lucky-13) Installer: Generated auto-install xml is world readable tomcat: Session fixation in form authenticator</p> <p>Web: jsessionid exposed via encoded url when using cookie based session tracking JBoss: custom authorization module implementations shared between applications apache-cxf: XML encryption backwards compatibility attacks openssl: DoS due to improper handling of OCSP response verification SSL/TLS: CBC padding timing attack (lucky-13) Installer: Generated auto-install xml is world readable tomcat: Session fixation in form authenticator</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0833 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-2067 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6</p> <p>java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tomcat6</p> <p>java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-2067