Description

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184.

Remediation

References

CVE-2011-5062

Related Vulnerabilities

TYPO3 Improper Input Validation Vulnerability (CVE-2010-5099)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.11)

WeBid Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-7118)

MySQL CVE-2021-2479 Vulnerability (CVE-2021-2479)

WordPress Plugin FluentSMTP-WP Mail SMTP, Amazon SES, SendGrid, MailGun and Any SMTP Connector Cross-Site Scripting (2.0.0)

Severity

Medium

Classification

CVE-2011-5062 CWE-264

Tags

Missing Update Known Vulnerabilities