Description
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
Remediation
References
Related Vulnerabilities
OpenSSL Integer Overflow or Wraparound Vulnerability (CVE-2021-23840)
WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (2.0.5)
qdPM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2020-26165)
WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.0)
WordPress Plugin MX Time Zone Clocks Cross-Site Scripting (3.4)