CVE ID:	CVE-2011-5063
Description:	The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184.
Test IDs:	1.3.6.1.4.1.25623.1.0.70718   1.3.6.1.4.1.25623.1.1.4.2012.0155.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5063 Debian Security Information: DSA-2401 (Google Search) http://www.debian.org/security/2012/dsa-2401 HPdes Security Advisory: HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E RedHat Security Advisories: RHSA-2011:1845 http://www.redhat.com/support/errata/RHSA-2011-1845.html RedHat Security Advisories: RHSA-2012:0074 http://rhn.redhat.com/errata/RHSA-2012-0074.html RedHat Security Advisories: RHSA-2012:0075 http://rhn.redhat.com/errata/RHSA-2012-0075.html RedHat Security Advisories: RHSA-2012:0076 http://rhn.redhat.com/errata/RHSA-2012-0076.html RedHat Security Advisories: RHSA-2012:0077 http://rhn.redhat.com/errata/RHSA-2012-0077.html RedHat Security Advisories: RHSA-2012:0078 http://rhn.redhat.com/errata/RHSA-2012-0078.html RedHat Security Advisories: RHSA-2012:0325 http://rhn.redhat.com/errata/RHSA-2012-0325.html http://secunia.com/advisories/57126 SuSE Security Announcement: SUSE-SU-2012:0155 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00002.html SuSE Security Announcement: openSUSE-SU-2012:0208 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00006.html