CVE record · 1 source
CVE-2026-111250
The embedded OpenEJB HTTP server reports every request as authenticated when an application requests authentication programmatically.
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-287
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The embedded OpenEJB HTTP server reports every request as authenticated when an application requests authentication programmatically.
The embedded OpenEJB HTTP server reports every request as authenticated when an application requests authentication programmatically. A remote unauthenticated attacker can access functionality protected this way. Only…