Search for packages
| purl | pkg:apache/tomcat@7.0.29 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-fpuc-fe6m-47c6
Aliases: CVE-2012-3546 GHSA-jgm2-m5cg-f66g |
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI. |
Affected by 0 other vulnerabilities. |
|
VCID-n76n-ywja-rbhh
Aliases: CVE-2012-3439 |
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-5885, CVE-2012-5886, CVE-2012-5887. Reason: This candidate is a duplicate of CVE-2012-5885, CVE-2012-5886, and CVE-2012-5887. Notes: All CVE users should reference one or more of CVE-2012-5885, CVE-2012-5886, and CVE-2012-5887 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. |
Affected by 0 other vulnerabilities. |
|
VCID-p4dn-y54m-8fd1
Aliases: CVE-2012-3544 GHSA-qfxv-3ppc-7qg5 |
Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T12:38:15.264476+00:00 | Apache Tomcat Importer | Affected by | VCID-fpuc-fe6m-47c6 | https://tomcat.apache.org/security-7.html | 38.0.0 |
| 2026-04-01T12:38:15.235408+00:00 | Apache Tomcat Importer | Affected by | VCID-n76n-ywja-rbhh | https://tomcat.apache.org/security-7.html | 38.0.0 |
| 2026-04-01T12:38:15.201939+00:00 | Apache Tomcat Importer | Affected by | VCID-p4dn-y54m-8fd1 | https://tomcat.apache.org/security-7.html | 38.0.0 |