REDHAT-BUG-2476511: Medium severity Apache Tomcat vulnerability
DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from before 7.0.0. Older unsupported versions any also be affect
Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache Tomcatto a version that resolves this vulnerability.Fixed in 11.0.22 - Upgrade
Upgrade
Apache Tomcatto a version that resolves this vulnerability.Fixed in 10.1.55 - Upgrade
Upgrade
Apache Tomcatto a version that resolves this vulnerability.Fixed in 9.0.118
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2476511?
The severity of REDHAT-BUG-2476511 is rated as medium (4) on the risk scale.
What is the description of REDHAT-BUG-2476511?
REDHAT-BUG-2476511 refers to authentication bypass issues in digest authentication within Apache Tomcat.
Which versions of Apache Tomcat are affected by REDHAT-BUG-2476511?
REDHAT-BUG-2476511 affects Apache Tomcat versions from 11.0.0-M1 through 11.0.21, 10.1.0-M1 through 10.1.54, 9.0.0.M1 through 9.0.117, and 8.5.0 through 8.5.100, as well as older unsupported versions.
How do I fix REDHAT-BUG-2476511?
To fix REDHAT-BUG-2476511, update Apache Tomcat to a version that is not affected by the vulnerability.
What type of vulnerability is REDHAT-BUG-2476511?
REDHAT-BUG-2476511 is categorized as a deprecated authentication bypass issue.