The vulnerability of the configuration @EnableMethodSecurity(mode=ASPECTJ) or spring-security-aspects in the Java framework for securing Spring-based industrial applications allows attackers to bypass the authentication process.

This method security aspect mode in Spring Security has a data protection flaw enabling authentication bypass.

Reporter	Title	Published	Views	Family All 26
IBM Security Bulletins	Security Bulletin: Maximo AI Service Component: Spring Security Aspects may not correctly locate method security annotations on private methods.	5 Jun 202507:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-security-core-6.4.5.jar	29 Aug 202506:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.1.0	5 Dec 202509:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2025.	12 Jan 202617:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in spring-security-core-6.4.5.jar (CVE-2025-41232)	24 Oct 202506:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services vulnerable to spring-security-core-6.4.3.jar (CVE-2025-41232)	27 Jun 202506:26	–	ibm
ATTACKERKB	CVE-2025-41232	21 May 202512:16	–	attackerkb
Circl	CVE-2025-41232	21 May 202512:26	–	circl
CNNVD	VMware Spring Security 安全漏洞	21 May 202500:00	–	cnnvd
CVE	CVE-2025-41232	21 May 202510:23	–	cve