CWE Code: 255
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Credentials Management
Summary: the windows installer for apache tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2009-11-12
Last Modified Date: 2019-03-25