A vulnerability in the JNDI Realm of... CVE-2021-30640

5.8 AV AC AU C I A
发布： 2021-07-12
修订： 2024-11-21

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有12条受影响产品信息