The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.
Red Hat
Privilege Escalation
Tomcat
Enterprise Linux
NVD
CVSS 2.0
2.6
EPSS
0.3%
OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) by. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity.
Denial Of Service
Folsom
Grizzly
Havana
NVD
CVSS 2.0
2.1
EPSS
0.1%