SS
Product
Springsource Spring Security
4
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Springsource Spring Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-5055 | – | Dec 5 | DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found,… Affected: through 2.0.6; 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +9 more |
| CVE-2011-2732 | – | Dec 5 | CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary… Affected: through 2.0.6; through 3.0.5; 2.0.0; 2.0.1; 2.0.2; 2.0.3; +7 more |
| CVE-2011-2731 | – | Dec 5 | Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security… Affected: through 2.0.6; through 3.0.5; 2.0.0; 2.0.1; 2.0.2; 2.0.3; +7 more |
| CVE-2010-3700 | – | Oct 29 | VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0,… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +4 more |
Showing 4