Skip to content

Authentication Bypass in Apache Tomcat

Moderate severity GitHub Reviewed Published May 17, 2022 to the GitHub Advisory Database • Updated May 1, 2023

Package

maven org.apache.tomcat:tomcat (Maven)

Affected versions

>= 6.0.0, < 6.0.36
>= 7.0.0, < 7.0.30

Patched versions

6.0.36
7.0.30

Description

org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.

References

Published by the National Vulnerability Database Dec 19, 2012
Published to the GitHub Advisory Database May 17, 2022
Reviewed Jul 13, 2022
Last updated May 1, 2023

Severity

Moderate

EPSS score

0.290%
(70th percentile)

Weaknesses

CVE ID

CVE-2012-3546

GHSA ID

GHSA-jgm2-m5cg-f66g

Source code

Credits

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.