{"action":"Upgrade org.apache.tomcat:tomcat to 5.5.36 (5.x), 6.0.36 (6.x) or 7.0.30 (7.x) or later.","affected":[{"fixed":"5.5.36","introduced":"5.5.0"},{"fixed":"6.0.36","introduced":"6.0.0"},{"fixed":"7.0.30","introduced":"7.0.0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2012-5885"],"ecosystem":"Maven","epss":0.0898,"exploited":false,"fixed_versions":["5.5.36","6.0.36","7.0.30"],"ghsa_id":"GHSA-99rf-92v6-cwx4","id":"tcs_01M5N8PQQ0YE2S3KQ402PYAQ9E","modified_at":"2023-11-08T03:57:10.582612Z","published_at":"2022-05-17T00:57:35Z","references":["https://osv.dev/vulnerability/GHSA-99rf-92v6-cwx4","https://nvd.nist.gov/vuln/detail/CVE-2012-5885","https://exchange.xforce.ibmcloud.com/vulnerabilities/80408","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19432","http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html","http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html","http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html","http://marc.info/?l=bugtraq&m=136485229118404&w=2","http://marc.info/?l=bugtraq&m=136612293908376&w=2","http://rhn.redhat.com/errata/RHSA-2013-0623.html","http://rhn.redhat.com/errata/RHSA-2013-0629.html","http://rhn.redhat.com/errata/RHSA-2013-0631.html","http://rhn.redhat.com/errata/RHSA-2013-0632.html","http://rhn.redhat.com/errata/RHSA-2013-0640.html","http://rhn.redhat.com/errata/RHSA-2013-0647.html","http://rhn.redhat.com/errata/RHSA-2013-0648.html","http://rhn.redhat.com/errata/RHSA-2013-0726.html","http://svn.apache.org/viewvc?view=revision&revision=1377807","http://svn.apache.org/viewvc?view=revision&revision=1380829","http://svn.apache.org/viewvc?view=revision&revision=1392248","http://tomcat.apache.org/security-5.html","http://tomcat.apache.org/security-6.html","http://tomcat.apache.org/security-7.html","http://www-01.ibm.com/support/docview.wss?uid=swg21626891","http://www.ubuntu.com/usn/USN-1637-1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-99rf-92v6-cwx4","url":"https://osv.dev/vulnerability/GHSA-99rf-92v6-cwx4"}],"summary":"Improper Access Control in Apache Tomcat"}