https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:25:17 +0000 https://cve.radiocsirt.org/vuln/certa-2011-avi-454 certa-2011-avi-454 https://cve.radiocsirt.org/vuln/certa-2011-avi-454 https://cve.radiocsirt.org/vuln/euvd-2026-115313 EUVD-2026-115313 https://cve.radiocsirt.org/vuln/euvd-2026-115313 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2204 <p>Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.</p> <p>Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-2204 https://cve.radiocsirt.org/vuln/ghsa-c57p-3v2g-w9rg <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.</p> <p>This issue was fixed in Apache Tomcat 7.0.17 but the release votes for the 7.0.17 and 7.0.18 release candidates did not pass. Therefore, users must download 7.0.19 to obtain a version that includes a fix.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.</p> <p>This issue was fixed in Apache Tomcat 7.0.17 but the release votes for the 7.0.17 and 7.0.18 release candidates did not pass. Therefore, users must download 7.0.19 to obtain a version that includes a fix.</p> https://cve.radiocsirt.org/vuln/ghsa-c57p-3v2g-w9rg https://cve.radiocsirt.org/vuln/gsd-2011-2204 gsd-2011-2204 https://cve.radiocsirt.org/vuln/gsd-2011-2204 https://cve.radiocsirt.org/vuln/rhsa-2011:1780 <p>tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication</p> <p>tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication</p> https://cve.radiocsirt.org/vuln/rhsa-2011:1780