BASM (Broken Authentication & Session Management) org.springframework.security:spring-security-core Dependency in Crucible Data Center and Server

🗓️ 12 Jun 2026 17:55:05Reported by security-metrics-botType

Broken authentication in Crucible Server 4.9.0 lets unauthenticated users impersonate others; upgrade to 4.9.11.

Reporter	Title	Published	Views	Family All 26
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Spring Framework Affect IBM Sterling B2B Integrator	13 May 202214:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple vulnerabilities due to Spring Security	13 May 202214:58	–	ibm
BDU FSTEC	The vulnerability of the PlaintextPasswordEncoder class implementation in the Java framework for securing Spring Security industrial applications allows a perpetrator to gain unauthorized access to protected information.	20 Aug 201900:00	–	bdu_fstec
CNVD	Pivotal Software Spring Security Authentication Vulnerability	24 Jun 201900:00	–	cnvd
CVE	CVE-2019-11272	26 Jun 201914:06	–	cve
Cvelist	CVE-2019-11272 PlaintextPasswordEncoder authenticates encoded passwords that are null	26 Jun 201914:06	–	cvelist
Debian	[SECURITY] [DLA 1848-1] libspring-security-2.0-java security update	9 Jul 201906:25	–	debian