libservlet3.1-java vulnerabilities (TuxCare)
11 vulnerabilities.
-
libservlet3.1-javaTuxCare Apache Tomcat: Security constraints for default servlet ignored method 6.5 Medium -
libservlet3.1-javaTuxCare Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind 7.3 High -
libservlet3.1-javaTuxCare Apache Tomcat: Security constraints not correctly applied 9.1 Critical -
libservlet3.1-javaTuxCare Apache Tomcat: LockOutRealm treats user names as case-sensitive 7.5 High -
libservlet3.1-javaTuxCare Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
libservlet3.1-javaTuxCare Apache Tomcat: Bypass of rules in Rewrite Valve 9.8 Critical -
libservlet3.1-javaTuxCare Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete 9.8 Critical -
libservlet3.1-javaTuxCare Apache Tomcat: WebSocket DoS with incomplete closing handshake 6.3 Medium -
libservlet3.1-javaTuxCare Local privilege escalation with FileStore 7.0 High -
libservlet3.1-javaTuxCare Incomplete fix for CVE-2020-9484 7.0 High -
libservlet3.1-javaTuxCare Potential remote code execution in Apache Tomcat 7.0 High