- Home
- CVEs with oval.description==Apache+Tomcat+4.1.0+through+4.1.39%2C+5.5.0+through+5.5.27%2C+and+6.0.0+through+6.0.18%2C+when+FORM+authentication+is+used%2C+allows+remote+attackers+to+enumerate+valid+usernames+via+requests+to+%2Fj_security_check+with+malformed+URL+encoding+of+passwords%2C+related+to+improper+error+checking+in+the+%281%29+MemoryRealm%2C+%282%29+DataSourceRealm%2C+and+%283%29+JDBCRealm+authentication+realms%2C+as+demonstrated+by+a+%25+%28percent%29+value+for+the+j_password+parameter
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top