Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 47

Export CSV
CVE-2022-22978

springframework: Authorization Bypass in RegexRequestMatcher

In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.

CVSS 3.1 · 9.8 Critical EPSS 12.4% KEV · Not listed
Vendors
Netapp Oracle Redhat and 1 more
Products
Active Iq Unified Manager Financial Services Crime And Compliance Management Studio Jboss Fuse and 2 more
CVE-2022-22976

springframework: BCrypt skips salt rounds for work factor of 31

Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the BCrypt class with the maximum work factor (31), the encoder does not perform any salt rounds, due to an integer overflow error. The default settings are not affected by this CVE.

CVSS 3.1 · 5.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Netapp Oracle Redhat and 1 more
Products
Active Iq Unified Manager Financial Services Crime And Compliance Management Studio Jboss Fuse and 2 more
CVE-2021-22119

spring-security: Denial-of-Service (DoS) attack via initiation of Authorization Request

Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux application. A malicious user or attacker can send multiple requests initiating the Authorization Request for the Authorization Code Grant, which has the potential of exhausting system resources using a single session or multiple sessions.

CVSS 3.1 · 7.5 High EPSS 6.0% KEV · Not listed
Vendors
Oracle Redhat Vmware
Products
Communications Cloud Native Core Policy Jboss Fuse Spring Security
CVE-2021-22112

jenkins: Privilege escalation vulnerability in bundled Spring Security library

Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application's intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.

CVSS 3.1 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors
Oracle Pivotal Software Vmware
Products
Communications Element Manager Communications Interactive Session Recorder Communications Unified Inventory Management and 5 more
CVE-2020-5408

Dictionary attack with Spring Security queryable text encryptor

Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector with CBC Mode in the implementation of the queryable text encryptor. A malicious user with access to the data that has been encrypted using such an encryptor may be able to derive the unencrypted values using a dictionary attack.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Pivotal Software Vmware
Products
Spring Security Spring Security
CVE-2019-3795

Insecure Randomness When Using a SecureRandom Instance Constructed by Spring Security

Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when using SecureRandomFactoryBean#setSeed to configure a SecureRandom instance. In order to be impacted, an honest application must provide a seed and make the resulting random material available to an attacker for inspection.

CVSS 3.1 · 5.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Vmware
Products
Debian Linux Spring Security
CVE-2018-1199

spring-framework: Improper URL path validation allows for bypassing of security checks on static resources

Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0.3) does not consider URL path parameters when processing security constraints. By adding a URL path parameter with special encodings, an attacker may be able to bypass a security constraint. The root cause of this issue is a lack of clarity regarding the handling of path parameters in the Servlet Specification. Some Servlet containers include path parameters in the value returned for getPathInfo() and some do not. Spring Security uses the value returned by getPathInfo() as part of the process of mapping requests to security constraints. In this particular attack, different character encodings used in path parameters allows secured Spring MVC static resource URLs to be bypassed.

CVSS 3.1 · 5.3 Medium EPSS 2.8% KEV · Not listed
Vendors
Oracle Redhat Vmware
Products
Rapid Planning Retail Xstore Point Of Service Fuse and 3 more