Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-30640HistoryJul 12, 2021 - 3:15 p.m.
CVE-2021-30640
2021-07-1215:15:00
Debian Security Bug Tracker
security-tracker.debian.org
12
0.002 Low
EPSS
Percentile
58.2%
A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | tomcat9 | <Â 9.0.43-2 | tomcat9_9.0.43-2_all.deb |
| Debian | 11 | all | tomcat9 | <Â 9.0.43-2~deb11u1 | tomcat9_9.0.43-2~deb11u1_all.deb |
| Debian | 10 | all | tomcat9 | <Â 9.0.31-1~deb10u6 | tomcat9_9.0.31-1~deb10u6_all.deb |
| Debian | 999 | all | tomcat9 | <Â 9.0.43-2 | tomcat9_9.0.43-2_all.deb |
| Debian | 13 | all | tomcat9 | <Â 9.0.43-2 | tomcat9_9.0.43-2_all.deb |
Related
nessus
nessus
FreeBSD : tomcat -- JNDI Realm Authentication Weakness in multiple versions (8b571fb2-f311-11eb-b12b-fc4dd43e2b6a)
2021-08-04 00:00:00
EulerOS 2.0 SP5 : tomcat (EulerOS-SA-2021-2520)
2021-09-27 00:00:00
EulerOS 2.0 SP3 : tomcat (EulerOS-SA-2021-2619)
2021-10-25 00:00:00
redhatcve
redhatcve
CVE-2021-30640
2021-07-12 19:46:17
openvas
openvas
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2021-2520)
2021-09-28 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2021-2489)
2021-09-24 00:00:00
cve
cve
CVE-2021-30640
2021-07-12 15:15:00
ibm
ibm
Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2021-30640)
2021-08-24 10:04:38
Security Bulletin: IBM Rational Build Forge is affected by Apache Tomcat version used in it. (CVE-2021-30640)
2022-07-07 16:39:00
Security Bulletin: IBM UrbanCode Release is affected by CVE-2021-30640
2022-01-25 07:56:03
freebsd
freebsd
tomcat -- JNDI Realm Authentication Weakness in multiple versions
2021-04-08 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 9.0.46
2021-05-12 00:00:00
Fixed in Apache Tomcat 8.5.66
2021-05-12 00:00:00
Fixed in Apache Tomcat 7.0.109
2021-04-26 00:00:00
f5
f5
K35033051 : Tomcat vulnerability CVE-2021-30640
2021-07-28 00:00:00
ubuntucve
ubuntucve
CVE-2021-30640
2021-07-12 00:00:00
osv
osv
CVE-2021-30640
2021-07-12 15:15:08
Authentication Bypass by Alternate Name in Apache Tomcat
2021-08-13 15:21:24
BIT-tomcat-2021-30640
2024-03-06 11:10:06
cvelist
cvelist
CVE-2021-30640 Auth weakness in JNDIRealm
2021-07-12 14:55:13
kaspersky
kaspersky
KLA12217 SB vulnerability in Apache Tomcat
2021-05-12 00:00:00
github
github
Authentication Bypass by Alternate Name in Apache Tomcat
2021-08-13 15:21:24
amazon
amazon
Low: tomcat7
2021-09-02 22:54:00
veracode
veracode
Access Restriction Bypass
2021-07-13 03:39:12
prion
prion
Design/Logic Flaw
2021-07-12 15:15:00
mageia
mageia
Updated tomcat packages fix security vulnerability
2021-10-23 13:05:28
atlassian
atlassian
Upgrade the bundled version of Apache Tomcat to 8.5.68 or later
2021-07-14 11:35:20
Upgrade the bundled version of Apache Tomcat to 8.5.68 or later
2021-07-14 11:35:20
redhat
redhat
(RHSA-2021:4863) Important: Red Hat JBoss Web Server 5.6.0 Security release
2021-11-30 14:21:16
(RHSA-2021:4861) Important: Red Hat JBoss Web Server 5.6.0 Security release
2021-11-30 14:19:46
(RHSA-2022:1179) Important: Red Hat support for Spring Boot 2.5.10 update
2022-04-12 19:02:50
gentoo
gentoo
Apache Tomcat: Multiple Vulnerabilities
2022-08-21 00:00:00
ubuntu
ubuntu
Tomcat vulnerabilities
2022-03-31 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2258
2023-10-21 16:49:43
photon
photon
Important Photon OS Security Update - PHSA-2021-3.0-0327
2021-11-10 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00