CVE-2012-5885: The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache T...

Security readout for executives and security teams

Some older Apache Tomcat versions could mishandle replay protection for HTTP Digest authentication. An attacker who can observe valid network requests may have an easier path to bypass intended access restrictions. This is most relevant where affected Tomcat servers still use Digest authentication on observable networks. Exposure is likely limited to legacy Tomcat deployments using HTTP Digest Access Authentication, especially where attackers could sniff valid requests. Vendor-packaged Tomcat in Linux or enterprise distributions may have separate fixed package versions. Treat this as a legacy-platform cleanup priority. It is not KEV-listed in the provided bundle, but affected systems protect access controls and may sit in enterprise middleware stacks that remain forgotten. Mitigation focus: Upgrade affected Tomcat branches to the fixed versions or later.; Apply vendor distribution updates from Red Hat, Ubuntu, SUSE, IBM, or HP where applicable.; Review Apache Tomcat security guidance for branch-specific remediation details..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.