PT-2012-4799 · Apache+4 · Apache Tomcat+4
Publicado
2012-10-19
·
Atualizado
2022-05-17
·
CVE-2012-3546
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Apache Tomcat versions 6.x before 6.0.36
Apache Tomcat versions 7.x before 7.0.30
Description
The issue allows remote attackers to bypass security-constraint checks when FORM authentication is used. This can be achieved by leveraging a previous
setUserPrincipal call and then placing /j security check at the end of a URI. The vulnerability can be exploited if some other component, such as the Single-Sign-On valve, had called request.setUserPrincipal() before the call to FormAuthenticator#authenticate().Recommendations
For Apache Tomcat 6.x before 6.0.36, update to version 6.0.36 or later to resolve the issue.
For Apache Tomcat 7.x before 7.0.30, update to version 7.0.30 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
/j security check endpoint until a patch is available.Exploit
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Apache Tomcat
Centos
Hp-Ux
Red Hat
Suse