Apache Tomcat allows remote attackers to bypass intended access restrictions

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2011-1088 · ADVISORY
• apache/tomcat commit f528992 · WEB
• apache/tomcat commit ee62741 · WEB
• apache/tomcat commit ece65c1 · WEB
• apache/tomcat commit dd10265 · WEB
• apache/tomcat commit dbac5e2 · WEB
• apache/tomcat commit b1d1047 · WEB
• apache/tomcat commit 9c90bdc · WEB
• apache/tomcat commit 880b1a4 · WEB
• apache/tomcat commit 63fd724 · WEB
• apache/tomcat commit 5c8560f

Lỗ hổng khác của org.apache.tomcat:tomcat

• CVE-2026-68525NGHIÊM TRỌNG 9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limi…
• CVE-2026-65905NGHIÊM TRỌNG 9.8Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made…
• CVE-2026-65182NGHIÊM TRỌNG 9.1Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a lo…
• CVE-2026-43515NGHIÊM TRỌNG 9.1Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This i…
• CVE-2026-43514THẤP 3.7Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 th…