tomcat-jsvc vulnerabilities (TuxCare)
8 vulnerabilities.
-
tomcat-jsvcTuxCare Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind 7.3 High -
tomcat-jsvcTuxCare Apache Tomcat: Security constraints not correctly applied 9.1 Critical -
tomcat-jsvcTuxCare Apache Tomcat: AJP secret compared in non-constant time 3.7 Low -
tomcat-jsvcTuxCare Apache Tomcat: LockOutRealm treats user names as case-sensitive 7.5 High -
tomcat-jsvcTuxCare Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
tomcat-jsvcTuxCare Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 9.8 Critical -
tomcat-jsvcTuxCare Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts 7.5 High -
tomcat-jsvcTuxCare Incomplete fix for CVE-2020-9484 7.0 High