tomcat7 vulnerabilities (TuxCare)
13 vulnerabilities.
-
tomcat7TuxCare Apache Tomcat: Security constraints for default servlet ignored method 6.5 Medium -
tomcat7TuxCare Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind 7.3 High -
tomcat7TuxCare Apache Tomcat: Security constraints not correctly applied 9.1 Critical -
tomcat7TuxCare Apache Tomcat: AJP secret compared in non-constant time 3.7 Low -
tomcat7TuxCare Apache Tomcat: LockOutRealm treats user names as case-sensitive 7.5 High -
tomcat7TuxCare Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
tomcat7TuxCare Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling 7.5 High -
tomcat7TuxCare Incomplete fix for CVE-2020-9484 7.0 High -
tomcat7TuxCare Infinite Loop in Apache Tomcat 7.5 High -
tomcat7TuxCare Potential remote code execution in Apache Tomcat 7.0 High -
tomcat7TuxCare Improper Privilege Management in Tomcat 9.8 Critical -
tomcat7TuxCare Cross-site scripting in Apache Tomcat 6.1 Medium -
tomcat7TuxCare The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical