Search for packages
| purl | pkg:rpm/redhat/jbossweb@2.1.13-3_patch_02.ep5?arch=el4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-12du-1vyt-bkgx
Aliases: CVE-2012-5887 GHSA-28cq-6rmx-pjq4 |
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests. | There are no reported fixed by versions. |
|
VCID-g7eg-s99s-xqe7
Aliases: CVE-2012-5886 GHSA-9xrj-439h-62hg |
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID. | There are no reported fixed by versions. |
|
VCID-r5rc-rdd9-bfbk
Aliases: CVE-2012-5885 GHSA-99rf-92v6-cwx4 |
Improper Access Control in Apache Tomcat The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:53:47.581302+00:00 | RedHat Importer | Affected by | VCID-12du-1vyt-bkgx | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5887.json | 38.0.0 |
| 2026-04-01T14:53:47.318705+00:00 | RedHat Importer | Affected by | VCID-g7eg-s99s-xqe7 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5886.json | 38.0.0 |
| 2026-04-01T14:53:47.073114+00:00 | RedHat Importer | Affected by | VCID-r5rc-rdd9-bfbk | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5885.json | 38.0.0 |