CVE-2012-3546

Severity

43%

Complexity

86%

Confidentiality

48%

org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.

org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:P/A:N).

Overview

Type

Apache Software Foundation Tomcat

First reported 12 years ago

2012-12-19 11:55:00

Last updated 7 years ago

2017-09-19 01:35:00

Affected Software

Apache Software Foundation Tomcat 6.0

6.0

Apache Software Foundation Tomcat 6.0.0

6.0.0

Apache Software Foundation Tomcat 6.0.0 alpha

6.0.0

Apache Software Foundation Tomcat 6.0.1

6.0.1

Apache Software Foundation Tomcat 6.0.1 alpha

6.0.1

Apache Software Foundation Tomcat 6.0.2

6.0.2

Apache Software Foundation Tomcat 6.0.2 alpha

6.0.2

Apache Software Foundation Tomcat 6.0.2 beta

6.0.2

Apache Software Foundation Tomcat 6.0.3

6.0.3

Apache Software Foundation Tomcat 6.0.4

6.0.4

Apache Software Foundation Tomcat 6.0.5

6.0.5

Apache Software Foundation Tomcat 6.0.6

6.0.6

Apache Software Foundation Tomcat 6.0.7

6.0.7

Apache Software Foundation Tomcat 6.0.8

6.0.8

Apache Software Foundation Tomcat 6.0.9

6.0.9

Apache Software Foundation Tomcat 6.0.9 beta

6.0.9

Apache Software Foundation Tomcat 6.0.10

6.0.10

Apache Software Foundation Tomcat 6.0.11

6.0.11

Apache Software Foundation Tomcat 6.0.12

6.0.12

Apache Software Foundation Tomcat 6.0.13

6.0.13

Apache Software Foundation Tomcat 6.0.14

6.0.14

Apache Software Foundation Tomcat 6.0.15

6.0.15

Apache Software Foundation Tomcat 6.0.16

6.0.16

Apache Software Foundation Tomcat 6.0.17

6.0.17

Apache Software Foundation Tomcat 6.0.18

6.0.18

Apache Software Foundation Tomcat 6.0.19

6.0.19

Apache Software Foundation Tomcat 6.0.20

6.0.20

Apache Software Foundation Tomcat 6.0.24

6.0.24

Apache Software Foundation Tomcat 6.0.26

6.0.26

Apache Software Foundation Tomcat 6.0.27

6.0.27

Apache Software Foundation Tomcat 6.0.28

6.0.28

Apache Software Foundation Tomcat 6.0.29

6.0.29

Apache Software Foundation Tomcat 6.0.30

6.0.30

Apache Software Foundation Tomcat 6.0.31

6.0.31

Apache Software Foundation Tomcat 6.0.32

6.0.32

Apache Software Foundation Tomcat 6.0.33

6.0.33

Apache Software Foundation Tomcat 6.0.35

6.0.35

Apache Software Foundation Tomcat 7.0.0

7.0.0

Apache Software Foundation Tomcat 7.0.0 beta

7.0.0

Apache Software Foundation Tomcat 7.0.1

7.0.1

Apache Software Foundation Tomcat 7.0.2

7.0.2

Apache Software Foundation Tomcat 7.0.2 beta

7.0.2

Apache Software Foundation Tomcat 7.0.3

7.0.3

Apache Software Foundation Tomcat 7.0.4

7.0.4

Apache Software Foundation Tomcat 7.0.4 beta

7.0.4

Apache Software Foundation Tomcat 7.0.5

7.0.5

Apache Software Foundation Tomcat 7.0.6

7.0.6

Apache Software Foundation Tomcat 7.0.7

7.0.7

Apache Software Foundation Tomcat 7.0.8

7.0.8

Apache Software Foundation Tomcat 7.0.9

7.0.9

Apache Software Foundation Tomcat 7.0.10

7.0.10

Apache Software Foundation Tomcat 7.0.11

7.0.11

Apache Software Foundation Tomcat 7.0.12

7.0.12

Apache Software Foundation Tomcat 7.0.13

7.0.13

Apache Software Foundation Tomcat 7.0.14

7.0.14

Apache Software Foundation Tomcat 7.0.15

7.0.15

Apache Software Foundation Tomcat 7.0.16

7.0.16

Apache Software Foundation Tomcat 7.0.17

7.0.17

Apache Software Foundation Tomcat 7.0.18

7.0.18

Apache Software Foundation Tomcat 7.0.19

7.0.19

Apache Software Foundation Tomcat 7.0.20

7.0.20

Apache Software Foundation Tomcat 7.0.21

7.0.21

Apache Software Foundation Tomcat 7.0.22

7.0.22

Apache Software Foundation Tomcat 7.0.23

7.0.23

Apache Software Foundation Tomcat 7.0.25

7.0.25

Apache Software Foundation Tomcat 7.0.28

7.0.28

References

20121204 CVE-2012-3546 Apache Tomcat Bypass of security constraints

openSUSE-SU-2012:1700

openSUSE-SU-2012:1701

openSUSE-SU-2013:0147

SSRT101139

HPSBST02955

RHSA-2013:0004

RHSA-2013:0005

RHSA-2013:0146

RHSA-2013:0147

RHSA-2013:0151

RHSA-2013:0157

RHSA-2013:0158

RHSA-2013:0162

RHSA-2013:0163

RHSA-2013:0164

RHSA-2013:0191

RHSA-2013:0192

RHSA-2013:0193

RHSA-2013:0194

RHSA-2013:0195

RHSA-2013:0196

RHSA-2013:0197

RHSA-2013:0198

RHSA-2013:0221

RHSA-2013:0235

RHSA-2013:0623

RHSA-2013:0640

RHSA-2013:0641

RHSA-2013:0642

51984

52054

57126

http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/realm/RealmBase.java?r1=1377892&r2=1377891&pathrev=1377892

Patch

http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1377892&r2=1377891&pathrev=1377892

Patch

http://svn.apache.org/viewvc?view=revision&revision=1377892

http://tomcat.apache.org/security-6.html

Vendor Advisory

http://tomcat.apache.org/security-7.html

Vendor Advisory

56812

1027833

USN-1685-1

SSRT101182

oval:org.mitre.oval:def:19305

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.