CVE-2022-31692

🗓️ 31 Oct 2022 00:00:00Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 196 Views

Spring Security v5.7/v5.6 Authorization Rules Bypas

Reporter	Title	Published	Views	Family All 55
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Security is vulnerable to CVE-2022-31692 used in IBM Maximo Application Suite	31 May 202320:20	–	ibm
IBM Security Bulletins	Security Bulletin: There is a security vulnerability in Spring Security used by IBM Maximo Data Loader (CVE-2022-31692)	29 Mar 202309:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Security affects IBM Process Mining . CVE-2022-31692	5 May 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to security bypass due to Spring Security (CVE-2022-31692)	10 Jan 202310:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to security bypass due to Spring Security (CVE-2022-31692, CVE-2022-22978)	13 Mar 202316:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Spring Security	17 May 202319:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Common Licensing's Administration And Reporting Tool (ART) and IBM LKS Administration Agent are affected by Spring Framework vulnerabilities.	30 Jul 202416:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	19 Dec 202215:35	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Security is vulnerable to CVE-2022-31692 and CVE-2023-20862 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202320:36	–	ibm

NVD

Node

vmware spring_securityRange5.6.0–5.6.9

vmware spring_securityRange5.7.0–5.7.5

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

[
  {
    "vendor": "n/a",
    "product": "Spring by VMware",
    "versions": [
      {
        "version": "5.7 to 5.7.4, 5.6 to 5.6.8 and older versions",
        "status": "affected"
      }
    ]
  }
]