CVE-2013-2051
The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows...
The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887.
Exploit likelihood
What each source reports
NVD Score used
The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887.
- Record
CVE-2013-2051- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887.
- Record
CVE-2013-2051- Updated
- 2026-11-02
EUVDEUVD-2013-2033 No score
The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887.
- Record
EUVD-2013-2033- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gf84-qmh9-28vw No score
The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows...
The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887.
- Record
GHSA-gf84-qmh9-28vw- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tomcat6Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-javadocRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-libRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-webappsRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcat6-admin-webappsRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-libRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-webappsRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-libRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-javadocRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-webappsRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-libRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
tomcat6-webappsRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-55.el6_4 | 0:6.0.24-55.el6_4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2051 is a low vulnerability (CVSS 2.6) in Redhat Enterprise Linux, published July 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.13%, the 82nd percentile. No source names a fixed version.
References
securityfocus.com/bid/60187
bugzilla.redhat.com/show_bug.cgi?id=959047
rhn.redhat.com/errata/RHSA-2013-0869.html
nvd.nist.gov/vuln/detail/CVE-2013-2051
github.com/advisories/GHSA-gf84-qmh9-28vw
access.redhat.com/errata/RHSA-2013:0869
Show 9 moreShow less
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0869.json
cve.org/CVERecord?id=CVE-2013-1976