CVE-2011-2204
published 2011-06-29CVE-2011-2204: Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon…
PriorityP45low1.9CVSS 2.0
AVLACMAuNCPINAN
EPSS
0.67%
48.1th percentile
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
Affected
78 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
CVSS provenance
nvdv2.01.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
vendor_ubuntu5.0MEDIUM
vendor_redhat1.9LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
tomcat: World-readable log directory
vendor_redhat·2013-02-22·CVSS 1.9
CVE-2013-0346 [LOW] tomcat: World-readable log directory
tomcat: World-readable log directory
Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."
Statement: Red Hat does not regard this to be a security flaw. The tomcat log directory does not contain any sensitive information, and when sensitive information has been written to log files, this has been considered a security flaw in tomcat (e.g. CVE-2011-2204). This issue was reported to the Apache Tomcat project, and they have not considered it a flaw in any published security advisories.
Ubuntu
Tomcat vulnerabilities
vendor_ubuntu·2011-11-08·CVSS 5.0
CVE-2011-3190 [MEDIUM] Tomcat vulnerabilities
Title: Tomcat vulnerabilities
Summary: Tomcat could be made to crash or expose sensitive information over the
network.
It was discovered that Tomcat incorrectly implemented HTTP DIGEST
authentication. An attacker could use this flaw to perform a variety of
authentication attacks. (CVE-2011-1184)
Polina Genova discovered that Tomcat incorrectly created log entries with
passwords when encountering errors during JMX user creation. A local
attacker could possibly use this flaw to obtain sensitive information. This
issue only affected Ubuntu 10.04 LTS, 10.10 and 11.04. (CVE-2011-2204)
It was discovered that Tomcat incorrectly validated certain request
attributes when sendfile is enabled. A local attacker could bypass intended
restrictions, or cause the JVM to crash, resulting in a denial of
Red Hat
tomcat: password disclosure vulnerability
vendor_redhat·2011-06-27·CVSS 1.9
CVE-2011-2204 [LOW] tomcat: password disclosure vulnerability
tomcat: password disclosure vulnerability
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
Statement: The Red Hat Security Response Team has rated this issue as having low security
impact, a future update may address this flaw.
OSV
Insertion of Sensitive Information into Log File in Apache Tomcat
osv·2022-05-14
CVE-2011-2204 [MEDIUM] Insertion of Sensitive Information into Log File in Apache Tomcat
Insertion of Sensitive Information into Log File in Apache Tomcat
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
This issue was fixed in Apache Tomcat 7.0.17 but the release votes for the 7.0.17 and 7.0.18 release candidates did not pass. Therefore, users must download 7.0.19 to obtain a version that includes a fix.
GHSA
Insertion of Sensitive Information into Log File in Apache Tomcat
ghsa·2022-05-14
CVE-2011-2204 [MEDIUM] CWE-200 Insertion of Sensitive Information into Log File in Apache Tomcat
Insertion of Sensitive Information into Log File in Apache Tomcat
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
This issue was fixed in Apache Tomcat 7.0.17 but the release votes for the 7.0.17 and 7.0.18 release candidates did not pass. Therefore, users must download 7.0.19 to obtain a version that includes a fix.
No detection rules found.
Bugzilla
CVE-2013-0346 tomcat: World-readable log directory
bugzilla·2013-03-22·CVSS 1.9
CVE-2013-0346 [LOW] CVE-2013-0346 tomcat: World-readable log directory
CVE-2013-0346 tomcat: World-readable log directory
Agostino Sarubbo reported on the oss-security mailing list [1] that, on Gentoo, Tomcat 7's log directory is world-accessible and the log files inside the directory are world-readable. This could allow an unprivileged user to read the log files.
References:
[1] http://www.openwall.com/lists/oss-security/2013/02/22/15
[2] http://www.openwall.com/lists/oss-security/2013/02/23/5
Discussion:
This issue did NOT affect the versions of the tomcat package, as shipped with Fedora release of 17 and 18.
---
Statement:
Red Hat does not regard this to be a security flaw. The tomcat log directory does not contain any sensitive information, and when sensitive information has been written to log files, this has been considered a security flaw in tom
Bugzilla
CVE-2011-2204 tomcat: password disclosure vulnerability
bugzilla·2011-06-27·CVSS 1.9
CVE-2011-2204 [LOW] CVE-2011-2204 tomcat: password disclosure vulnerability
CVE-2011-2204 tomcat: password disclosure vulnerability
From the upstream advisory notes [1]:
When using the MemoryUserDatabase (based on tomcat-users.xml) and creating users via JMX, an exception during the user creation process may trigger an error message in the JMX client that includes the user's password. This error message is also written to the Tomcat logs. User passwords are visible to administrators with JMX access and/or administrators with read access to the tomcat-users.xml file. Users that do not have these permissions but are able to read log files may be able to discover a user's password.
This is fixed in Tomcat 5.5.34 (not yet released) [2] and Tomcat 6.0.33 (not yet released) [3].
[1] http://tomcat.apache.org/security-5.html
[2] http://svn.apache.org/viewvc?view=revi
Bugzilla
CVE-2011-2204 tomcat: password disclosure vulnerability [fedora-16]
bugzilla·2011-06-27·CVSS 1.9
CVE-2011-2204 [LOW] CVE-2011-2204 tomcat: password disclosure vulnerability [fedora-16]
CVE-2011-2204 tomcat: password disclosure vulnerability [fedora-16]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=717013
Please note: this issue affects multiple suppor
Bugzilla
CVE-2011-2204 tomcat: password disclosure vulnerability [fedora-all]
bugzilla·2011-06-27·CVSS 1.9
CVE-2011-2204 [LOW] CVE-2011-2204 tomcat: password disclosure vulnerability [fedora-all]
CVE-2011-2204 tomcat: password disclosure vulnerability [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=717013
Please note: this issue affects multiple suppo
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlhttp://marc.info/?l=bugtraq&m=132215163318824&w=2http://marc.info/?l=bugtraq&m=133469267822771&w=2http://marc.info/?l=bugtraq&m=136485229118404&w=2http://marc.info/?l=bugtraq&m=139344343412337&w=2http://secunia.com/advisories/44981http://secunia.com/advisories/48308http://secunia.com/advisories/57126http://securitytracker.com/id?1025712http://support.apple.com/kb/HT5130http://tomcat.apache.org/security-5.htmlhttp://tomcat.apache.org/security-6.htmlhttp://tomcat.apache.org/security-7.htmlhttp://www.debian.org/security/2012/dsa-2401http://www.mandriva.com/security/advisories?name=MDVSA-2011:156http://www.osvdb.org/73429http://www.redhat.com/support/errata/RHSA-2011-1845.htmlhttp://www.securityfocus.com/bid/48456https://bugzilla.redhat.com/show_bug.cgi?id=717013https://exchange.xforce.ibmcloud.com/vulnerabilities/68238https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3Ehttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14931https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19532http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlhttp://marc.info/?l=bugtraq&m=132215163318824&w=2http://marc.info/?l=bugtraq&m=133469267822771&w=2http://marc.info/?l=bugtraq&m=136485229118404&w=2http://marc.info/?l=bugtraq&m=139344343412337&w=2http://secunia.com/advisories/44981http://secunia.com/advisories/48308http://secunia.com/advisories/57126http://securitytracker.com/id?1025712http://support.apple.com/kb/HT5130http://tomcat.apache.org/security-5.htmlhttp://tomcat.apache.org/security-6.htmlhttp://tomcat.apache.org/security-7.htmlhttp://www.debian.org/security/2012/dsa-2401http://www.mandriva.com/security/advisories?name=MDVSA-2011:156http://www.osvdb.org/73429http://www.redhat.com/support/errata/RHSA-2011-1845.htmlhttp://www.securityfocus.com/bid/48456https://bugzilla.redhat.com/show_bug.cgi?id=717013https://exchange.xforce.ibmcloud.com/vulnerabilities/68238https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3Ehttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14931https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19532
2011-06-29
Published