CVE-2011-5062

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values…

published January 14, 2012

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07356 · 94.4th percentile
Published
2012-01-14T21:00Z
EPSS history
Timeline
  • 14 JAN 21:00Z
    The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values…
    cvelistv5