CVE-2012-5887

CVE-2012-5887 describes a bypass vulnerability in the HTTP Digest Access Authentication implementation of Apache Tomcat versions 5.5.x, 6.x, and 7.x. This flaw allows remote attackers to bypass access restrictions by sniffing network traffic for valid requests due to improper checking of stale nonce values. With a CVSS score of 5.0, this vulnerability has a network attack vector, low attack complexity, and a potential impact of partial integrity compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.