CVE-2012-5886

CVE-2012-5886 describes an authentication bypass vulnerability in Apache Tomcat versions 5.5.x, 6.x, and 7.x due to improper caching of authenticated user information within the session state during HTTP Digest Access Authentication. This flaw allows remote attackers to bypass authentication by manipulating session IDs. Rated with a CVSS score of 5.0, this vulnerability has a low attack complexity and could lead to partial integrity impact, but no confidentiality or availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.