BASM (Broken Authentication & Session Management) org.springframework.security:spring-security-web Dependency in Crowd Data Center

🗓️ 01 Aug 2026 04:32:05Reported by security-metrics-botType

Spring Security X.509 certificate CN parsing flaw allows user impersonation in Crowd Data Center versions 6.0.0 through 7.2.0.

Reporter	Title	Published	Views	Family All 152
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Replication AI Edition 12.0.0 is affected by authentication bypass, cross-site scripting, server-side request forgery, and denial of service vulnerabilities in Spring Framework and Spring Security components.	6 Nov 202618:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI	15 Oct 202605:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilites identified in open source libraries shipped with IBM Guardium Cryptography Manager (GCM)	27 Aug 202613:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Spring Security affect IBM Sterling B2B Integrator and IBM Sterling File Gateway	15 Sep 202613:32	–	ibm
Atlassian	BASM (Broken Authentication & Session Management) in Bitbucket Data Center	15 Jul 202604:29	–	atlassian
Atlassian	BASM (Broken Authentication & Session Management) SubjectDnX509PrincipalExtractor Dependency in Jira Service Management Data Center	10 Jul 202604:29	–	atlassian
Atlassian	BASM (Broken Authentication & Session Management) org.springframework.security:spring-security-web Dependency in Jira Software Data Center	10 Jul 202604:29	–	atlassian
Chainguard	CVE-2026-47838 vulnerabilities	2 Jul 202620:22	–	cgr
Circl	CVE-2026-47838	10 Jun 202601:47	–	circl