Search for packages
| purl | pkg:maven/tomcat/catalina@6.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bwx4-6bsd-aaaf
Aliases: CVE-2016-0762 GHSA-wxcp-f2c8-x6xv |
Information Exposure Through Timing Discrepancy The Realm implementations in Apache Tomcat does not process the supplied password if the supplied user name did not exist which makes it possible to use a timing attack to determine valid user names. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:38:39.148906+00:00 | GitLab Importer | Affected by | VCID-bwx4-6bsd-aaaf | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/tomcat/catalina/CVE-2016-0762.yml | 34.0.1 |
| 2024-01-03T18:01:22.362272+00:00 | GitLab Importer | Affected by | VCID-bwx4-6bsd-aaaf | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/tomcat/catalina/CVE-2016-0762.yml | 34.0.0rc1 |