VulnerableCode Package Details - pkg:maven/org.apache.tomcat/tomcat-catalina@6.0.0

Search for packages

Vulnerability	Summary	Fixed by
VCID-3mpp-yjss-aaad Aliases: CVE-2012-5886 GHSA-9xrj-439h-62hg	The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.	6.0.36 Affected by 0 other vulnerabilities. 7.0.30 Affected by 15 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-szah-tgau-aaad Aliases: CVE-2016-5018 GHSA-4v3g-g84w-hv7r	Improper Access Control In Apache Tomcat, a malicious web application was able to bypass a configured `SecurityManager` via a Tomcat utility method that was accessible to web applications.	6.0.47 Affected by 0 other vulnerabilities. 7.0.72 Affected by 9 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 8.0.37 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 8.5.5 Affected by 13 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 9.0.0.M10 Affected by 7 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-3mpp-yjss-aaad
Aliases:
CVE-2012-5886
GHSA-9xrj-439h-62hg

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.

6.0.36
Affected by 0 other vulnerabilities.

7.0.30
Affected by 15 other vulnerabilities.

VCID-szah-tgau-aaad
Aliases:
CVE-2016-5018
GHSA-4v3g-g84w-hv7r

Improper Access Control In Apache Tomcat, a malicious web application was able to bypass a configured `SecurityManager` via a Tomcat utility method that was accessible to web applications.

6.0.47
Affected by 0 other vulnerabilities.

7.0.72
Affected by 9 other vulnerabilities.

8.0.37
Affected by 7 other vulnerabilities.

8.5.5
Affected by 13 other vulnerabilities.

9.0.0.M10
Affected by 7 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-01-17T02:30:08.260990+00:00	GHSA Importer	Affected by	VCID-szah-tgau-aaad	None	35.1.0
2024-09-17T22:36:57.589311+00:00	GitLab Importer	Affected by	VCID-szah-tgau-aaad	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5018.yml	34.0.1
2024-09-17T22:36:57.171195+00:00	GitLab Importer	Affected by	VCID-3mpp-yjss-aaad	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2012-5886.yml	34.0.1
2024-09-17T22:02:42.640073+00:00	GHSA Importer	Affected by	VCID-3mpp-yjss-aaad	https://github.com/advisories/GHSA-9xrj-439h-62hg	34.0.1
2024-01-03T18:00:01.286578+00:00	GitLab Importer	Affected by	VCID-szah-tgau-aaad	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5018.yml	34.0.0rc1
2024-01-03T18:00:00.886085+00:00	GitLab Importer	Affected by	VCID-3mpp-yjss-aaad	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2012-5886.yml	34.0.0rc1
2024-01-03T17:37:31.088624+00:00	GHSA Importer	Affected by	VCID-3mpp-yjss-aaad	https://github.com/advisories/GHSA-9xrj-439h-62hg	34.0.0rc1