CVE-2012-3546

CVE-2012-3546 is a security bypass vulnerability affecting Apache Tomcat versions 6.x before 6.0.36 and 7.x before 7.0.30, specifically when FORM authentication is configured. Remote attackers can bypass security-constraint checks by manipulating URIs after a setUserPrincipal call. This vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and a partial impact on integrity, with no impact on confidentiality or availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.