org.apache.tomcat:tomcat-coyote-ffm vulnerabilities (TuxCare)
21 vulnerabilities.
org.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Redirect after FORM auth may bypass method specific constraints9.1 Criticalorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Bypass longest prefix security constraint9.1 Criticalorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: LockOutRealm treats user names as case-sensitive7.5 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Digest authenticator will authenticate any unknown user9.8 Criticalorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: HTTP/2 request headers not validated9.8 Criticalorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: WebSocket authentication header exposure7.3 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling7.5 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token7.5 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default7.5 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled9.1 Criticalorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Occasionally open redirect6.1 Mediumorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Request smuggling via invalid chunk extension7.5 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Security constraint bypass with HTTP/0.93.7 Loworg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS5.3 Mediumorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: console manipulation via escape sequences in log messages9.6 Criticalorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: session fixation via rewrite valve6.5 Mediumorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: h2 DoS - Made You Reset7.5 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: DoS via excessive h2 streams at connection start7.5 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: DoS via integer overflow in multipart file upload7.5 Highorg.apache.tomcat:tomcat-coyote-ffmTuxCareApache Tomcat: Security constraint bypass for CGI scripts7.3 High