CVE-2013-2051 — Redhat Enterprise Linux vulnerability

4 documents4 sources
Severity
2.6LOWNVD
EPSS
0.3%
top 43.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Enterprise Linux
Timeline
PublishedJul 9
Latest updateMay 14

Description

The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887.

CVSS vector

AV:N/AC:H/C:N/I:P/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages0 packages

Also affects: Enterprise Linux 6.0

🔴Vulnerability Details

1
GHSA
GHSA-gf84-qmh9-28vw: The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions↗2022-05-14
▶

📋Vendor Advisories

1
Red Hat
tomcat: DIGEST authentication vulnerable to replay attacks↗2013-05-28
▶

💬Community

1
Bugzilla
CVE-2013-2051 tomcat: DIGEST authentication vulnerable to replay attacks↗2013-05-03
▶