Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, related to lack of checking of nonce (aka server nonce) and nc (aka nonce-count or client nonce count) values.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Tomcat安全漏洞
Vulnerability Description
Apache Tomcat 7.0.0 到7.0.11，6.0.0到6.0.32，5.5.0到5.5.33版本中存在多个安全漏洞。攻击者可利用该漏洞绕过安全限制执行未授权的攻击。
CVSS Information
N/A
Vulnerability Type
N/A