CVE-2013-2067
published 2013-06-01CVE-2013-2067: java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33…
PriorityP344medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
7.15%
94.3th percentile
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
| apache | tomcat | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_redhat6.8MEDIUM
vendor_ubuntu5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Tomcat vulnerabilities
vendor_ubuntu·2013-05-28·CVSS 5.0
CVE-2012-3544 [MEDIUM] Tomcat vulnerabilities
Title: Tomcat vulnerabilities
Summary: Several security issues were fixed in Tomcat.
It was discovered that Tomcat incorrectly handled certain requests
submitted using chunked transfer encoding. A remote attacker could use this
flaw to cause the Tomcat server to stop responding, resulting in a denial
of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS.
(CVE-2012-3544)
It was discovered that Tomcat incorrectly handled certain authentication
requests. A remote attacker could possibly use this flaw to inject a
request that would get executed with a victim's credentials. This issue
only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS, and Ubuntu 12.10.
(CVE-2013-2067)
It was discovered that Tomcat sometimes exposed elements of a previous
request to the current request. T
Red Hat
tomcat: Session fixation in form authenticator
vendor_redhat·2013-05-10·CVSS 6.8
CVE-2013-2067 [MEDIUM] CWE-384 tomcat: Session fixation in form authenticator
tomcat: Session fixation in form authenticator
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.
Statement: This flaw allows an attacker to circumvent a session fixation prevention mechanism which was implemented in tomcat 5.5.x >= 5.5.29, 6.0.x >= 6.0.21 and 7.x. Earlier versions of tomcat do not include this mechanism, and are therefore not affected by this flaw. JBoss Web as included in JBoss 5.x products also does not inclu
VulDB
Oracle Transportation Management up to 6.3.2 Application Server improper authentication (Nessus ID 66949 / ID 121874)
vuldb·2026-10-10·CVSS 6.8
CVE-2013-2067 [MEDIUM] Oracle Transportation Management up to 6.3.2 Application Server improper authentication (Nessus ID 66949 / ID 121874)
A vulnerability, which was classified as problematic, has been found in Oracle Transportation Management up to 6.3.2. This impacts an unknown function of the component Application Server. This manipulation causes improper authentication.
This vulnerability is registered as CVE-2013-2067. Remote exploitation of the attack is possible. No exploit is available.
Applying a patch is the recommended action to fix this issue.
VulDB
Apache Tomcat up to 7.0.32 FORM Authentication improper authentication (Nessus ID 66949 / ID 121874)
vuldb·2026-10-10·CVSS 6.8
CVE-2013-2067 [MEDIUM] Apache Tomcat up to 7.0.32 FORM Authentication improper authentication (Nessus ID 66949 / ID 121874)
A vulnerability marked as critical has been reported in Apache Tomcat up to 7.0.32. The affected element is an unknown function of the component FORM Authentication Handler. The manipulation leads to improper authentication.
This vulnerability is listed as CVE-2013-2067. The attack may be initiated remotely. There is no available exploit.
It is suggested to upgrade the affected component.
VulDB
Oracle Communications Policy Management up to 9.7.3/9.9.1/10.4.1/12.1.1 Tomcat improper authentication (Nessus ID 75107 / ID 121874)
vuldb·2026-10-10·CVSS 6.8
CVE-2013-2067 [MEDIUM] Oracle Communications Policy Management up to 9.7.3/9.9.1/10.4.1/12.1.1 Tomcat improper authentication (Nessus ID 75107 / ID 121874)
A vulnerability identified as critical has been detected in Oracle Communications Policy Management up to 9.7.3/9.9.1/10.4.1/12.1.1. Affected by this issue is some unknown functionality of the component Tomcat. The manipulation leads to improper authentication.
This vulnerability is referenced as CVE-2013-2067. Remote exploitation of the attack is possible. No exploit is available.
You should upgrade the affected component.
VulDB
Oracle Secure Global Desktop up to 4.63 Apache Tomcat improper authentication (Nessus ID 66949 / ID 121874)
vuldb·2026-10-10·CVSS 6.8
CVE-2013-2067 [MEDIUM] Oracle Secure Global Desktop up to 4.63 Apache Tomcat improper authentication (Nessus ID 66949 / ID 121874)
A vulnerability was found in Oracle Secure Global Desktop up to 4.63. It has been rated as problematic. This affects an unknown function of the component Apache Tomcat. The manipulation leads to improper authentication.
This vulnerability is documented as CVE-2013-2067. The attack can be initiated remotely. There is not any exploit available.
It is suggested to install a patch to address this issue.
VulDB
Oracle Communications Policy Management up to 9.7.3/9.9.1/10.4.1/12.1.1 Tomcat improper authentication (Nessus ID 66965 / ID 121874)
vuldb·2026-10-10·CVSS 6.8
CVE-2013-2067 [MEDIUM] Oracle Communications Policy Management up to 9.7.3/9.9.1/10.4.1/12.1.1 Tomcat improper authentication (Nessus ID 66965 / ID 121874)
A vulnerability was found in Oracle Communications Policy Management up to 9.7.3/9.9.1/10.4.1/12.1.1. It has been rated as critical. The impacted element is an unknown function of the component Tomcat. This manipulation causes improper authentication.
The identification of this vulnerability is CVE-2013-2067. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
OSV
Improper Authentication in Apache Tomcat
osv·2022-05-14
CVE-2013-2067 [MEDIUM] Improper Authentication in Apache Tomcat
Improper Authentication in Apache Tomcat
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.
GHSA
Improper Authentication in Apache Tomcat
ghsa·2022-05-14
CVE-2013-2067 [MEDIUM] CWE-287 Improper Authentication in Apache Tomcat
Improper Authentication in Apache Tomcat
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.
OSV
CVE-2013-2067: java/org/apache/catalina/authenticator/FormAuthenticator
osv·2013-05-10·CVSS 6.8
CVE-2013-2067 [MEDIUM] CVE-2013-2067: java/org/apache/catalina/authenticator/FormAuthenticator
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements and sessions, which allows remote attackers to inject a request into a session by sending this request during completion of the login form, a variant of a session fixation attack.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-2067 tomcat: Session fixation in form authenticator
bugzilla·2013-05-10·CVSS 6.8
CVE-2013-2067 [MEDIUM] CVE-2013-2067 tomcat: Session fixation in form authenticator
CVE-2013-2067 tomcat: Session fixation in form authenticator
A session fixation flaw was found in the way FormAuthenticator module of Apache Tomcat, an Apache Servlet/JSP Engine, performed authentication requests management in certain circumstances (the most recent authentication request was associated with current user's session). An attacker could use this flaw to inject (and possibly successfully to complete) an authentication request, that would be executed using the credentials of the victim.
Relevant upstream patch:
* for Apache Tomcat 6.x:
http://svn.apache.org/viewvc?view=revision&revision=1417891
* for Apache Tomcat 7.x:
http://svn.apache.org/viewvc?view=rev&rev=1408044
Discussion:
This issue did NOT affect the versions of the tomcat package, as shipped with Fedora release of
Bugzilla
CVE-2013-2067 CVE-2012-3544 tomcat6 various flaws [fedora-all]
bugzilla·2013-05-10·CVSS 5.0
CVE-2013-2067 [MEDIUM] CVE-2013-2067 CVE-2012-3544 tomcat6 various flaws [fedora-all]
CVE-2013-2067 CVE-2012-3544 tomcat6 various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects multiple s
http://archives.neohapsis.com/archives/bugtraq/2013-05/0041.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0833.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0834.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0839.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0964.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1437.htmlhttp://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java?r1=1417891&r2=1417890&pathrev=1417891http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java?r1=1408044&r2=1408043&pathrev=1408044http://svn.apache.org/viewvc?view=revision&revision=1408044http://svn.apache.org/viewvc?view=revision&revision=1417891http://tomcat.apache.org/security-6.htmlhttp://tomcat.apache.org/security-7.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlhttp://www.securityfocus.com/bid/59799http://www.securityfocus.com/bid/64758http://www.ubuntu.com/usn/USN-1841-1https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3Ehttp://archives.neohapsis.com/archives/bugtraq/2013-05/0041.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0833.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0834.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0839.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0964.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1437.htmlhttp://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java?r1=1417891&r2=1417890&pathrev=1417891http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/authenticator/FormAuthenticator.java?r1=1408044&r2=1408043&pathrev=1408044http://svn.apache.org/viewvc?view=revision&revision=1408044http://svn.apache.org/viewvc?view=revision&revision=1417891http://tomcat.apache.org/security-6.htmlhttp://tomcat.apache.org/security-7.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlhttp://www.securityfocus.com/bid/59799http://www.securityfocus.com/bid/64758http://www.ubuntu.com/usn/USN-1841-1https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
2013-06-01
Published