Description
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.
Remediation
References
http://svn.apache.org/viewvc?view=revision&revision=1392248
http://tomcat.apache.org/security-6.html
http://svn.apache.org/viewvc?view=revision&revision=1380829
http://tomcat.apache.org/security-5.html
http://svn.apache.org/viewvc?view=revision&revision=1377807
http://tomcat.apache.org/security-7.html
http://www.ubuntu.com/usn/USN-1637-1
http://www.securityfocus.com/bid/56403
http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
http://rhn.redhat.com/errata/RHSA-2013-0640.html
http://rhn.redhat.com/errata/RHSA-2013-0631.html
http://rhn.redhat.com/errata/RHSA-2013-0632.html
http://rhn.redhat.com/errata/RHSA-2013-0633.html
http://rhn.redhat.com/errata/RHSA-2013-0623.html
http://rhn.redhat.com/errata/RHSA-2013-0629.html
http://rhn.redhat.com/errata/RHSA-2013-0647.html
http://rhn.redhat.com/errata/RHSA-2013-0726.html
http://rhn.redhat.com/errata/RHSA-2013-0648.html
http://secunia.com/advisories/51371
http://www-01.ibm.com/support/docview.wss?uid=swg21626891
https://exchange.xforce.ibmcloud.com/vulnerabilities/80407
Related Vulnerabilities
CVE-2019-1003097 Vulnerability in maven package com.ds.tools.hudson:crowd
CVE-2021-24122 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2023-37958 Vulnerability in maven package org.jenkins-ci.plugins:sumologic-publisher
CVE-2021-45046 Vulnerability in maven package org.apache.logging.log4j:log4j-core
CVE-2020-2213 Vulnerability in maven package org.jenkins-ci.plugins:whitesource