CVE record · 1 source
CVE-2026-111264
The security constraint generated for EJB JAX-WS endpoints with configured authentication protects only some HTTP methods.
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-288
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The security constraint generated for EJB JAX-WS endpoints with configured authentication protects only some HTTP methods.
The security constraint generated for EJB JAX-WS endpoints with configured authentication protects only some HTTP methods. A remote unauthenticated attacker can bypass authentication by sending requests with another HTTP method.…