Lucene search

CVE-2023-34042

🗓️ 05 Feb 2024 22:55:15Reported by [email protected]Type

spring-security file permissions vulnerability requires updat

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 20
Vulnrichment	CVE-2023-34042	5 Feb 202422:00	–	vulnrichment
CVE	CVE-2023-34042	5 Feb 202422:15	–	cve
Veracode	Incorrect File Permission	7 Feb 202407:52	–	veracode
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Security affects IBM Process Mining CVE-2023-34042	15 Dec 202314:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with spring-security-config is vulnerable to Incorrect Permission Assignment for Critical Resource	17 Apr 202416:37	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Security is vulnerable to CVE-2023-34042 used in IBM Maximo Application Suite - Monitor Component	1 Dec 202319:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor with spring-security-config is vulnerable to Incorrect Permission Assignment for Critical Resource	17 Apr 202416:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a multiple vulnerabilities (CVE-2023-39975, CVE-2023-34042)	20 Dec 202314:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Service is vulnerable to multiple vulnerabilities due to IBM Java	10 May 202404:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager November 2023 - Multiple CVEs addressed	15 Nov 202313:37	–	ibm

Nvd

Node

vmware spring_securityRange5.8.4–5.8.7

vmware spring_securityRange6.0.4–6.0.7

vmware spring_securityRange6.1.1–6.1.4

vmware spring_securityMatch5.7.9

vmware spring_securityMatch5.7.10

Source	Link
security	www.security.netapp.com/advisory/ntap-20241129-0010/
spring	www.spring.io/security/cve-2023-34042

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Feb 2024 22:15Current

5.1Medium risk

Vulners AI Score5.1

CVSS35.5

EPSS0.00044

CWE-732