tomcat7-docs vulnerabilities (TuxCare)
13 vulnerabilities.
-
tomcat7-docsTuxCare Apache Tomcat: Security constraints for default servlet ignored method 6.5 Medium -
tomcat7-docsTuxCare Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind 7.3 High -
tomcat7-docsTuxCare Apache Tomcat: Security constraints not correctly applied 9.1 Critical -
tomcat7-docsTuxCare Apache Tomcat: AJP secret compared in non-constant time 3.7 Low -
tomcat7-docsTuxCare Apache Tomcat: LockOutRealm treats user names as case-sensitive 7.5 High -
tomcat7-docsTuxCare Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
tomcat7-docsTuxCare Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling 7.5 High -
tomcat7-docsTuxCare Incomplete fix for CVE-2020-9484 7.0 High -
tomcat7-docsTuxCare Infinite Loop in Apache Tomcat 7.5 High -
tomcat7-docsTuxCare Potential remote code execution in Apache Tomcat 7.0 High -
tomcat7-docsTuxCare Improper Privilege Management in Tomcat 9.8 Critical -
tomcat7-docsTuxCare Cross-site scripting in Apache Tomcat 6.1 Medium -
tomcat7-docsTuxCare The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical