Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2011-5064

DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184.

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
apache / tomcat 5.5.27 5.5.27.x
apache / tomcat 5.5.18 5.5.18.x
apache / tomcat 5.5.12 5.5.12.x
apache / tomcat 5.5.14 5.5.14.x
apache / tomcat 5.5.10 5.5.10.x
apache / tomcat 5.5.4 5.5.4.x
apache / tomcat 5.5.7 5.5.7.x
apache / tomcat 5.5.1 5.5.1.x
apache / tomcat 5.5.11 5.5.11.x
apache / tomcat 5.5.28 5.5.28.x
apache / tomcat 5.5.6 5.5.6.x
apache / tomcat 5.5.26 5.5.26.x
apache / tomcat 5.5.20 5.5.20.x
apache / tomcat 5.5.15 5.5.15.x
apache / tomcat 5.5.5 5.5.5.x
apache / tomcat 5.5.30 5.5.30.x
apache / tomcat 5.5.21 5.5.21.x
apache / tomcat 5.5.22 5.5.22.x
apache / tomcat 5.5.3 5.5.3.x
apache / tomcat 5.5.32 5.5.32.x
apache / tomcat 5.5.31 5.5.31.x
apache / tomcat 5.5.9 5.5.9.x
apache / tomcat 5.5.25 5.5.25.x
apache / tomcat 5.5.33 5.5.33.x
apache / tomcat 5.5.2 5.5.2.x
apache / tomcat 5.5.0 5.5.0.x
apache / tomcat 5.5.13 5.5.13.x
apache / tomcat 5.5.24 5.5.24.x
apache / tomcat 5.5.8 5.5.8.x
apache / tomcat 5.5.16 5.5.16.x
apache / tomcat 5.5.17 5.5.17.x
apache / tomcat 5.5.29 5.5.29.x
apache / tomcat 5.5.19 5.5.19.x
apache / tomcat 5.5.23 5.5.23.x
apache / tomcat 6.0.6 6.0.6.x
apache / tomcat 6.0.11 6.0.11.x
apache / tomcat 6.0.7 6.0.7.x
apache / tomcat 6.0.4 6.0.4.x
apache / tomcat 6.0.15 6.0.15.x
apache / tomcat 6.0.20 6.0.20.x
apache / tomcat 6.0.10 6.0.10.x
apache / tomcat 6.0.31 6.0.31.x
apache / tomcat 6.0.29 6.0.29.x
apache / tomcat 6.0.3 6.0.3.x
apache / tomcat 6.0.9 6.0.9.x
apache / tomcat 6.0.24 6.0.24.x
apache / tomcat 6.0.17 6.0.17.x
apache / tomcat 6.0 6.0.x
apache / tomcat 6.0.32 6.0.32.x
apache / tomcat 6.0.28 6.0.28.x
apache / tomcat 6.0.0 6.0.0.x
apache / tomcat 6.0.14 6.0.14.x
apache / tomcat 6.0.1 6.0.1.x
apache / tomcat 6.0.12 6.0.12.x
apache / tomcat 6.0.18 6.0.18.x
apache / tomcat 6.0.5 6.0.5.x
apache / tomcat 6.0.30 6.0.30.x
apache / tomcat 6.0.2 6.0.2.x
apache / tomcat 6.0.13 6.0.13.x
apache / tomcat 6.0.26 6.0.26.x
apache / tomcat 6.0.19 6.0.19.x
apache / tomcat 6.0.27 6.0.27.x
apache / tomcat 6.0.16 6.0.16.x
apache / tomcat 6.0.8 6.0.8.x
apache / tomcat 7.0.8 7.0.8.x
apache / tomcat 7.0.1 7.0.1.x
apache / tomcat 7.0.2 7.0.2.x
apache / tomcat 7.0.5 7.0.5.x
apache / tomcat 7.0.0 7.0.0.x
apache / tomcat 7.0.6 7.0.6.x
apache / tomcat 7.0.11 7.0.11.x
apache / tomcat 7.0.0-beta 7.0.0-beta.x
apache / tomcat 7.0.7 7.0.7.x
apache / tomcat 7.0.10 7.0.10.x
apache / tomcat 7.0.9 7.0.9.x
apache / tomcat 7.0.4 7.0.4.x
apache / tomcat 7.0.3 7.0.3.x
org.apache.tomcat / tomcat 5.5.0 5.5.34
org.apache.tomcat / tomcat 6.0.0 6.0.33
org.apache.tomcat / tomcat 7.0.0 7.0.12