How many CVEs have patched authenticate?

5 published CVEs changed authenticate in apache/tomcat, in 12 distinct patches totalling 371 changed lines, between 2012 and 2017.

What is the latest CVE that changed authenticate?

CVE-2016-0762 (Observable Discrepancy in Apache Tomcat), published 2017-08-10, changed lines 274 to 335 of java/org/apache/catalina/realm/DataSourceRealm.java.

How does authenticate compare to the rest of apache/tomcat?

apache/tomcat has 135 CVEs with a located fix in total; 5 of them changed authenticate.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

authenticate in apache/tomcat: Patched by 5 CVEs

CVEs that patched it

Every published CVE whose fix changed authenticate, newest first, with the lines each fix touched.

Observable Discrepancy in Apache Tomcat
CVE-2016-0762 · java/org/apache/catalina/realm/DataSourceRealm.java · lines 274–335 · +5 −3 in 3 hunks
Medium · CVSS 5.9
EPSS 8.0%2017-08-10
Observable Discrepancy in Apache Tomcat
CVE-2016-0762 · java/org/apache/catalina/realm/JDBCRealm.java · lines 387–388 · +2 −0
Medium · CVSS 5.9
EPSS 8.0%2017-08-10
Observable Discrepancy in Apache Tomcat
CVE-2016-0762 · java/org/apache/catalina/realm/MemoryRealm.java · lines 153–156 · +4 −0
Medium · CVSS 5.9
EPSS 8.0%2017-08-10
Observable Discrepancy in Apache Tomcat
CVE-2016-0762 · java/org/apache/catalina/realm/RealmBase.java · lines 419–589 · +12 −10 in 5 hunks
Medium · CVSS 5.9
EPSS 8.0%2017-08-10
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
CVE-2015-5345 · java/org/apache/catalina/authenticator/FormAuthenticator.java · lines 222–235 · +14 −0
Medium · CVSS 5.3
EPSS 18.4%2016-02-25
Authentication Bypass in Apache Tomcat
CVE-2011-1184 · java/org/apache/catalina/authenticator/DigestAuthenticator.java · lines 264–304 · +9 −89 in 3 hunks
Medium · CVSS 5.0
EPSS 8.2%2012-01-14
Improper Authentication in Apache Tomcat
CVE-2011-5062 · java/org/apache/catalina/authenticator/DigestAuthenticator.java · lines 264–304 · +9 −89 in 3 hunks
Medium · CVSS 5.0
EPSS 7.4%2012-01-14
Improper Authentication in Apache Tomcat
CVE-2011-5063 · java/org/apache/catalina/authenticator/DigestAuthenticator.java · lines 264–304 · +9 −89 in 3 hunks
Medium · CVSS 4.3
EPSS 6.5%2012-01-14
Improper Authentication in Apache Tomcat
CVE-2011-5063 · java/org/apache/catalina/realm/RealmBase.java · lines 367–373 · +7 −2
Medium · CVSS 4.3
EPSS 6.5%2012-01-14
Improper Authentication in Apache Tomcat
CVE-2011-5062 · java/org/apache/catalina/realm/RealmBase.java · lines 367–373 · +7 −2
Medium · CVSS 5.0
EPSS 7.4%2012-01-14
Authentication Bypass in Apache Tomcat
CVE-2011-1184 · java/org/apache/catalina/realm/RealmBase.java · lines 367–373 · +7 −2
Medium · CVSS 5.0
EPSS 8.2%2012-01-14

Get an alert when the next CVE fix lands in apache/tomcat, with the patched functions.

Monitor tomcat CVEs

authenticate

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track apache/tomcat CVEs