Description
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
Remediation
References
Related Vulnerabilities
Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5741)
WordPress Plugin WordPress Filter Gallery Security Bypass (0.0.6)
WordPress Plugin WooCommerce Product Feed Manager Security Bypass (2.2.3)
WordPress Plugin Digg Digg Cross-Site Request Forgery (5.3.4)
Jboss EAP Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2021-3642)