Lucene search
HistoryOct 29, 2010 - 7:00 p.m.
CVE-2010-3700
cve-2010-3700
vmware
springsource
spring security
acegi security
ibm
websphere
application server
remote attack
security bypass
6.6 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.9%
VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.
Related
prion
prion
Design/Logic Flaw
2010-10-29 19:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2010-11-01 00:00:00
CVE-2010-3700: Spring Security bypass of security constraints
2010-11-01 00:00:00
osv
osv
packetstorm
packetstorm
Spring Security Security Constraint Bypass
2010-10-28 00:00:00
github
github
6.6 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.9%
Related for CVE-2010-3700