libservlet3.0-java vulnerabilities (TuxCare)
13 vulnerabilities.
-
libservlet3.0-javaTuxCare Apache Tomcat: Security constraints for default servlet ignored method 6.5 Medium -
libservlet3.0-javaTuxCare Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind 7.3 High -
libservlet3.0-javaTuxCare Apache Tomcat: Security constraints not correctly applied 9.1 Critical -
libservlet3.0-javaTuxCare Apache Tomcat: AJP secret compared in non-constant time 3.7 Low -
libservlet3.0-javaTuxCare Apache Tomcat: LockOutRealm treats user names as case-sensitive 7.5 High -
libservlet3.0-javaTuxCare Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
libservlet3.0-javaTuxCare Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling 7.5 High -
libservlet3.0-javaTuxCare Incomplete fix for CVE-2020-9484 7.0 High -
libservlet3.0-javaTuxCare Infinite Loop in Apache Tomcat 7.5 High -
libservlet3.0-javaTuxCare Potential remote code execution in Apache Tomcat 7.0 High -
libservlet3.0-javaTuxCare Improper Privilege Management in Tomcat 9.8 Critical -
libservlet3.0-javaTuxCare Cross-site scripting in Apache Tomcat 6.1 Medium -
libservlet3.0-javaTuxCare The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical