Lucene search
HistoryOct 29, 2010 - 7:00 p.m.
CVE-2010-3700
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.4
Confidence
Low
EPSS
0.005
Percentile
77.1%
VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.
Affected configurations
Node
acegisecurityacegi-securityMatch1.0.0
ORacegisecurityacegi-securityMatch1.0.1
ORacegisecurityacegi-securityMatch1.0.2
ORacegisecurityacegi-securityMatch1.0.3
ORacegisecurityacegi-securityMatch1.0.4
ORacegisecurityacegi-securityMatch1.0.5
ORacegisecurityacegi-securityMatch1.0.6
ORacegisecurityacegi-securityMatch1.0.7
ORvmwarespringsource_spring_securityMatch2.0.0
ORvmwarespringsource_spring_securityMatch2.0.1
ORvmwarespringsource_spring_securityMatch2.0.2
ORvmwarespringsource_spring_securityMatch2.0.3
ORvmwarespringsource_spring_securityMatch2.0.4
ORvmwarespringsource_spring_securityMatch2.0.5
ORvmwarespringsource_spring_securityMatch3.0.0
ORvmwarespringsource_spring_securityMatch3.0.1
ORvmwarespringsource_spring_securityMatch3.0.2
ORvmwarespringsource_spring_securityMatch3.0.3
ibmwebsphere_application_serverMatch6.1
ORibmwebsphere_application_serverMatch7.0
Related
prion
prion
Design/Logic Flaw
2010-10-29 19:00:00
cve
cve
CVE-2010-3700
2010-10-29 19:00:02
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2010-11-01 00:00:00
CVE-2010-3700: Spring Security bypass of security constraints
2010-11-01 00:00:00
packetstorm
packetstorm
Spring Security Security Constraint Bypass
2010-10-28 00:00:00
osv
osv
github
github
cvelist
cvelist
CVE-2010-3700
2010-10-29 18:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.4
Confidence
Low
EPSS
0.005
Percentile
77.1%
Related for NVD:CVE-2010-3700