CVE record · 1 source
CVE-2026-111248
The Jakarta Security identity store backed by the Tomcat user database compares the supplied password with the stored value as plain text and ignores…
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-836
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The Jakarta Security identity store backed by the Tomcat user database compares the supplied password with the stored value as plain text and ignores…
The Jakarta Security identity store backed by the Tomcat user database compares the supplied password with the stored value as plain text and ignores the configured credential handler. When digested passwords are stored, an…