jws6-tomcat-lib

Direct Vulnerabilities

Known vulnerabilities in the jws6-tomcat-lib package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Incomplete Cleanup	*
M Incorrect Implementation of Authentication Algorithm	*
L Symbolic Name not Mapping to Correct Object	<0:10.1.49-16.redhat_00016.1.el10jws
M Authentication Bypass	<0:10.1.49-16.redhat_00016.1.el10jws
L Reliance on Untrusted Inputs in a Security Decision	<0:10.1.49-16.redhat_00016.1.el10jws
L Insufficient Logging	<0:10.1.49-16.redhat_00016.1.el10jws
L Detection of Error Condition Without Action	<0:10.1.49-16.redhat_00016.1.el10jws
M Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:10.1.49-16.redhat_00016.1.el10jws
L Time-of-check Time-of-use (TOCTOU)	<0:10.1.49-16.redhat_00016.1.el10jws
M Insufficient Session Expiration	<0:10.1.49-16.redhat_00016.1.el10jws
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:10.1.49-16.redhat_00016.1.el10jws
M Allocation of Resources Without Limits or Throttling	<0:10.1.49-16.redhat_00016.1.el10jws
H Off-by-one Error	<0:10.1.49-16.redhat_00016.1.el10jws
H Allocation of Resources Without Limits or Throttling	<0:10.1.49-16.redhat_00016.1.el10jws
H Authentication Bypass by Primary Weakness	<0:10.1.49-16.redhat_00016.1.el10jws
L Authentication Bypass by Primary Weakness	*
M Missing Release of Resource after Effective Lifetime	*
M Improper Certificate Validation	*
L Improper Handling of Length Parameter Inconsistency	*
L HTTP Request Smuggling	*
L Incorrect Synchronization	*
H HTTP Request Smuggling	*
H Allocation of Resources Without Limits or Throttling	*
H Authentication Bypass	*
H Excessive Platform Resource Consumption within a Loop	*
M Improperly Implemented Security Check for Standard	<0:10.1.49-15.redhat_00013.1.el10jws
M Information Exposure	<0:10.1.49-15.redhat_00013.1.el10jws
M Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:10.1.49-15.redhat_00013.1.el10jws
M Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:10.1.49-15.redhat_00013.1.el10jws
L Information Exposure	<0:10.1.49-15.redhat_00013.1.el10jws
M Improper Handling of Case Sensitivity	<0:10.1.49-15.redhat_00013.1.el10jws
M Improper Validation of Syntactic Correctness of Input	<0:10.1.49-15.redhat_00013.1.el10jws
M Incorrect Implementation of Authentication Algorithm	<0:10.1.49-15.redhat_00013.1.el10jws
H Allocation of Resources Without Limits or Throttling	<0:10.1.49-15.redhat_00013.1.el10jws
L File and Directory Information Exposure	<0:10.1.49-13.redhat_00011.1.el10jws
L Inappropriate Encoding for Output Context	<0:10.1.49-13.redhat_00011.1.el10jws
M Incorrect Implementation of Authentication Algorithm	<0:10.1.49-13.redhat_00011.1.el10jws
L HTTP Request Smuggling	<0:10.1.49-13.redhat_00011.1.el10jws
H Use of a Risky Cryptographic Primitive	<0:10.1.49-13.redhat_00011.1.el10jws
L Open Redirect	<0:10.1.49-13.redhat_00011.1.el10jws
M Incorrect Implementation of Authentication Algorithm	<0:10.1.49-13.redhat_00011.1.el10jws
M Improper Validation of Unsafe Equivalence in Input	<0:10.1.49-10.redhat_00008.1.el10jws
L Improper Input Validation	<0:10.1.49-10.redhat_00008.1.el10jws
M Incomplete Blacklist	<0:10.1.49-10.redhat_00008.1.el10jws
H Improper Certificate Validation	<0:10.1.49-9.redhat_00007.1.el10jws
M Improper Neutralization	<0:10.1.49-7.redhat_00006.1.el10jws
M Session Fixation	<0:10.1.49-7.redhat_00006.1.el10jws
M Improper Handling of Case Sensitivity	<0:10.1.49-7.redhat_00006.1.el10jws
M Improper Resource Shutdown or Release	<0:10.1.36-19.redhat_00018.1.el10jws
H Directory Traversal	<0:10.1.36-19.redhat_00018.1.el10jws
L Improper Neutralization	<0:10.1.36-19.redhat_00018.1.el10jws
L Integer Overflow or Wraparound	<0:10.1.36-8.redhat_00009.1.el10jws
H Resource Exhaustion	<0:10.1.36-8.redhat_00009.1.el10jws
M Allocation of Resources Without Limits or Throttling	<0:10.1.36-7.redhat_00008.1.el10jws
L Authentication Bypass	<0:10.1.36-7.redhat_00008.1.el10jws
M Resource Exhaustion	<0:10.1.36-7.redhat_00008.1.el10jws
M Allocation of Resources Without Limits or Throttling	<0:10.1.36-7.redhat_00008.1.el10jws

Vulnerability

Vulnerable Version

Incomplete Cleanup