Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-30640

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-36qh-35cm-5w2w

Authentication Bypass by Alternate Name in Apache Tomcat A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.

gitlab/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2021-30640

Improper Authentication A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the `LockOut Realm`.

gitlab/maven/org.apache.tomcat/tomcat/CVE-2021-30640

Improper Authentication A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the `LockOut Realm`.