Most recent entries from all

bdu:2021-03686

BIT-tomcat-2021-30640 — Auth weakness in JNDIRealm

Affected: Bitnami: tomcat

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0 to 10.0.5; 9.0.0 to 9.0.45; 8.5.0 to 8.5.65.

EUVD-2026-27017

fkie_cve-2021-30640

GHSA-36qh-35cm-5w2w — Authentication Bypass by Alternate Name in Apache Tomcat

Affected: Maven: org.apache.tomcat:tomcat

gsd-2021-30640

OESA-2021-1299 — tomcat security update

Affected: openEuler:20.03-LTS-SP1: tomcat, openEuler:20.03-LTS-SP2: tomcat

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project Security Fix(es): A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.(CVE-2021-30640)

openSUSE-SU-2021:1490-1 — Security update for tomcat

Security update for tomcat

RHSA-2021:4861 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.0 Security release

openssl: Read buffer overruns processing ASN.1 strings openssl: integer overflow in CipherUpdate openssl: NULL pointer dereference in X509_issuer_and_serial_hash() tomcat: JNDI realm authentication weakness tomcat: HTTP request smuggling when used with a reverse proxy tomcat: OutOfMemoryError caused by HTTP upgrade connection leak could lead to DoS

SUSE-SU-2021:3602-1 — Security update for tomcat

Security update for tomcat

UBUNTU-CVE-2021-30640

Affected: Ubuntu:Pro:14.04:LTS: tomcat6, Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:Pro:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:18.04:LTS: tomcat9, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:20.04:LTS: tomcat9

WID-SEC-W-2022-0607 — Red Hat FUSE: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.