https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:04:51 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-066 certa-2012-avi-066 https://cve.radiocsirt.org/vuln/certa-2012-avi-066 https://cve.radiocsirt.org/vuln/euvd-2026-117137 EUVD-2026-117137 https://cve.radiocsirt.org/vuln/euvd-2026-117137 https://cve.radiocsirt.org/vuln/fkie_cve-2011-5064 <p>DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.</p> <p>DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-5064 https://cve.radiocsirt.org/vuln/ghsa-6cr4-7c7p-p3xv <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.</p> https://cve.radiocsirt.org/vuln/ghsa-6cr4-7c7p-p3xv https://cve.radiocsirt.org/vuln/gsd-2011-5064 gsd-2011-5064 https://cve.radiocsirt.org/vuln/gsd-2011-5064 https://cve.radiocsirt.org/vuln/rhsa-2011:1780 <p>tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication</p> <p>tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: password disclosure vulnerability tomcat: security manager restrictions bypass tomcat: authentication bypass and information disclosure tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication tomcat: Multiple weaknesses in HTTP DIGEST authentication</p> https://cve.radiocsirt.org/vuln/rhsa-2011:1780