CVE-2012-3546: Authentication Bypass in Apache Tomcat
(updated )
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
References
- lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
- lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
- lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
- marc.info/?l=bugtraq&m=136612293908376&w=2
- marc.info/?l=bugtraq&m=139344343412337&w=2
- rhn.redhat.com/errata/RHSA-2013-0004.html
- rhn.redhat.com/errata/RHSA-2013-0005.html
- rhn.redhat.com/errata/RHSA-2013-0146.html
- rhn.redhat.com/errata/RHSA-2013-0147.html
- rhn.redhat.com/errata/RHSA-2013-0151.html
- rhn.redhat.com/errata/RHSA-2013-0157.html
- rhn.redhat.com/errata/RHSA-2013-0158.html
- rhn.redhat.com/errata/RHSA-2013-0162.html
- rhn.redhat.com/errata/RHSA-2013-0163.html
- rhn.redhat.com/errata/RHSA-2013-0164.html
- rhn.redhat.com/errata/RHSA-2013-0191.html
- rhn.redhat.com/errata/RHSA-2013-0192.html
- rhn.redhat.com/errata/RHSA-2013-0194.html
- rhn.redhat.com/errata/RHSA-2013-0195.html
- rhn.redhat.com/errata/RHSA-2013-0196.html
- rhn.redhat.com/errata/RHSA-2013-0198.html
- rhn.redhat.com/errata/RHSA-2013-0221.html
- rhn.redhat.com/errata/RHSA-2013-0235.html
- rhn.redhat.com/errata/RHSA-2013-0623.html
- rhn.redhat.com/errata/RHSA-2013-0640.html
- rhn.redhat.com/errata/RHSA-2013-0641.html
- rhn.redhat.com/errata/RHSA-2013-0642.html
- svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/realm/RealmBase.java?r1=1377892&r2=1377891&pathrev=1377892
- svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1377892&r2=1377891&pathrev=1377892
- svn.apache.org/viewvc?view=revision&revision=1377892
- tomcat.apache.org/security-6.html
- tomcat.apache.org/security-7.html
- github.com/advisories/GHSA-jgm2-m5cg-f66g
- nvd.nist.gov/vuln/detail/CVE-2012-3546
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19305
Code Behaviors & Features
Detect and mitigate CVE-2012-3546 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →