{"action":"Upgrade org.apache.tomcat:tomcat-catalina to 5.5.36 (5.x), 6.0.36 (6.x) or 7.0.30 (7.x) or later.","affected":[{"fixed":"5.5.36","introduced":"5.5.0"},{"fixed":"6.0.36","introduced":"6.0.0"},{"fixed":"7.0.30","introduced":"7.0.0"}],"component":"org.apache.tomcat:tomcat-catalina","cve_ids":["CVE-2012-5886"],"ecosystem":"Maven","epss":0.08768,"exploited":false,"fixed_versions":["5.5.36","6.0.36","7.0.30"],"ghsa_id":"GHSA-9xrj-439h-62hg","id":"tcs_01M5N8R2F66BNG6FEZ6MG46NJ6","modified_at":"2024-11-29T05:41:26.457451Z","published_at":"2022-05-17T01:38:30Z","references":["https://osv.dev/vulnerability/GHSA-9xrj-439h-62hg","https://nvd.nist.gov/vuln/detail/CVE-2012-5886","https://exchange.xforce.ibmcloud.com/vulnerabilities/80407","http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html","http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html","http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html","http://rhn.redhat.com/errata/RHSA-2013-0623.html","http://rhn.redhat.com/errata/RHSA-2013-0629.html","http://rhn.redhat.com/errata/RHSA-2013-0631.html","http://rhn.redhat.com/errata/RHSA-2013-0632.html","http://rhn.redhat.com/errata/RHSA-2013-0640.html","http://rhn.redhat.com/errata/RHSA-2013-0647.html","http://rhn.redhat.com/errata/RHSA-2013-0648.html","http://rhn.redhat.com/errata/RHSA-2013-0726.html","http://svn.apache.org/viewvc?view=revision&revision=1377807","http://svn.apache.org/viewvc?view=revision&revision=1380829","http://svn.apache.org/viewvc?view=revision&revision=1392248","http://tomcat.apache.org/security-5.html","http://tomcat.apache.org/security-6.html","http://tomcat.apache.org/security-7.html","http://www-01.ibm.com/support/docview.wss?uid=swg21626891","http://www.ubuntu.com/usn/USN-1637-1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9xrj-439h-62hg","url":"https://osv.dev/vulnerability/GHSA-9xrj-439h-62hg"}],"summary":"Improper Authentication in Apache Tomcat"}