206 lines
9.3 KiB
JSON
206 lines
9.3 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2026-101296",
|
||
"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "apache",
|
||
"dateReserved": "2026-09-28T13:07:28.598Z",
|
||
"datePublished": "2026-10-20T13:45:39.959Z",
|
||
"dateUpdated": "2026-11-09T14:20:25.975Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"providerMetadata": {
|
||
"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
|
||
"shortName": "apache",
|
||
"dateUpdated": "2026-10-21T06:31:55.233Z"
|
||
},
|
||
"title": "Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms",
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"description": "CWE-304 Missing critical step in authentication",
|
||
"lang": "en",
|
||
"cweId": "CWE-304",
|
||
"type": "CWE"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"source": {
|
||
"discovery": "EXTERNAL"
|
||
},
|
||
"affected": [
|
||
{
|
||
"vendor": "Apache Software Foundation",
|
||
"product": "Apache Tomcat",
|
||
"versions": [
|
||
{
|
||
"status": "affected",
|
||
"version": "11.0.0-M1",
|
||
"lessThanOrEqual": "11.0.26",
|
||
"versionType": "semver"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "10.1.0-M1",
|
||
"lessThanOrEqual": "10.1.60",
|
||
"versionType": "semver"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "9.0.0.M1",
|
||
"lessThanOrEqual": "9.0.122",
|
||
"versionType": "semver"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "8.5.0",
|
||
"lessThanOrEqual": "8.5.100",
|
||
"versionType": "semver"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "7.0.0",
|
||
"lessThanOrEqual": "7.0.109",
|
||
"versionType": "semver"
|
||
}
|
||
],
|
||
"defaultStatus": "unaffected"
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"value": "A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.\n\n\n\nThe following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.",
|
||
"lang": "en",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "<p>A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism <span>allowed attackers to authenticate without providing the correct password.</span></p><p>This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.</p><p><span>The following versions were EOL at the time the CVE was created but are known to be affected:</span><span> </span>from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. <span>Other unsupported versions may also be affected.</span></p><p>Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.</p>"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://lists.apache.org/thread.html/bl52b9go9ckoov8x4v3dt6rkm573cygd",
|
||
"tags": [
|
||
"vendor-advisory"
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "Textual description of severity",
|
||
"content": {
|
||
"text": "important"
|
||
}
|
||
},
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "GENERAL"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"credits": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Sai Sreewathsa Kovalluri, Shon Babu, and Kannan K of Innspark Solutions Private Limited",
|
||
"type": "finder"
|
||
}
|
||
],
|
||
"x_generator": {
|
||
"engine": "Vulnogram 1.0.3"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"title": "CVE Program Container",
|
||
"references": [
|
||
{
|
||
"url": "http://www.openwall.com/lists/oss-security/2026/10/20/26"
|
||
}
|
||
],
|
||
"providerMetadata": {
|
||
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
||
"shortName": "CVE",
|
||
"dateUpdated": "2026-10-20T18:09:50.320Z"
|
||
}
|
||
},
|
||
{
|
||
"metrics": [
|
||
{
|
||
"cvssV4_0": {
|
||
"version": "4.0",
|
||
"baseScore": 9.1,
|
||
"attackVector": "NETWORK",
|
||
"baseSeverity": "CRITICAL",
|
||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
|
||
"userInteraction": "NONE",
|
||
"attackComplexity": "LOW",
|
||
"attackRequirements": "PRESENT",
|
||
"privilegesRequired": "NONE",
|
||
"subIntegrityImpact": "NONE",
|
||
"vulnIntegrityImpact": "HIGH",
|
||
"subAvailabilityImpact": "NONE",
|
||
"vulnAvailabilityImpact": "NONE",
|
||
"subConfidentialityImpact": "NONE",
|
||
"vulnConfidentialityImpact": "HIGH"
|
||
}
|
||
},
|
||
{
|
||
"cvssV3_1": {
|
||
"scope": "UNCHANGED",
|
||
"version": "3.1",
|
||
"baseScore": 8.1,
|
||
"attackVector": "NETWORK",
|
||
"baseSeverity": "HIGH",
|
||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||
"integrityImpact": "HIGH",
|
||
"userInteraction": "NONE",
|
||
"attackComplexity": "HIGH",
|
||
"availabilityImpact": "HIGH",
|
||
"privilegesRequired": "NONE",
|
||
"confidentialityImpact": "HIGH"
|
||
}
|
||
},
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2026-10-21T03:56:30.453469Z",
|
||
"id": "CVE-2026-101296",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "total"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2026-11-09T14:20:25.975Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |