libservlet3.0-java-doc vulnerabilities (TuxCare)
13 vulnerabilities.
-
libservlet3.0-java-docTuxCare Apache Tomcat: Security constraints for default servlet ignored method 6.5 Medium -
libservlet3.0-java-docTuxCare Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind 7.3 High -
libservlet3.0-java-docTuxCare Apache Tomcat: Security constraints not correctly applied 9.1 Critical -
libservlet3.0-java-docTuxCare Apache Tomcat: AJP secret compared in non-constant time 3.7 Low -
libservlet3.0-java-docTuxCare Apache Tomcat: LockOutRealm treats user names as case-sensitive 7.5 High -
libservlet3.0-java-docTuxCare Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
libservlet3.0-java-docTuxCare Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling 7.5 High -
libservlet3.0-java-docTuxCare Incomplete fix for CVE-2020-9484 7.0 High -
libservlet3.0-java-docTuxCare Infinite Loop in Apache Tomcat 7.5 High -
libservlet3.0-java-docTuxCare Potential remote code execution in Apache Tomcat 7.0 High -
libservlet3.0-java-docTuxCare Improper Privilege Management in Tomcat 9.8 Critical -
libservlet3.0-java-docTuxCare Cross-site scripting in Apache Tomcat 6.1 Medium -
libservlet3.0-java-docTuxCare The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical