Richard Zowalla

Apache TomEE: Code execution by any authenticated user via the SSH administration shell

Apache TomEE: Authentication bypass for accounts without a stored password in SQL login module

Apache TomEE: Local code execution via predictable passivation files in the shared temporary directory

Apache TomEE: Privilege escalation via leaked MicroProfile JWT run-as identity

Apache TomEE: Expired MicroProfile JWT tokens accepted with negative clock skew

Apache TomEE: Authorization bypass in MicroProfile JWT role checks for JAX-RS resources

Apache TomEE: Privilege escalation via WS-Security caller identity leaking between requests

Apache TomEE: HTTP sessions shared across web applications in embedded HTTP server

Apache TomEE: Privilege escalation via user name matching a role name

Apache TomEE: Authentication with the stored password digest in Tomcat user identity store