#VU64536 Permissions, Privileges, and Access Controls in Apache Tomcat - CVE-2012-5885

Cybersecurity Help s.r.o.

Published: 2022-06-21

Vulnerability identifier: #VU64536

Vulnerability risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2012-5885

CWE-ID: CWE-264

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Apache Tomcat
Server applications / Web servers

Vendor: Apache Foundation

Description

The vulnerability allows a remote attacker to bypass intended access restrictions.

The vulnerability exists due to replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values. A remote attacker can bypass intended access restrictions by sniffing the network for valid requests

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Apache Tomcat: 5.5, 6.0.0 - 6.0.35, 7.0.0 - 7.0.29

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

Latest bulletins with this vulnerability

Multiple vulnerabilities in Apache Tomcat