CVE-2023-34035

🗓️ 18 Jul 2023 16:15:11Reported by GoogleType

osv🔗 osv.dev👁 25 Views

Spring Security Vulnerability in Multiple Servlet Configuratio

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2	7 May 202419:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Security affects IBM Process Mining . Multiple CVEs	11 Oct 202309:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in VMware Tanzu Spring Security	29 Nov 202301:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services November 2023 - Multiple CVEs addressed	12 Dec 202317:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for November 2023.	26 Mar 202504:08	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Security is vulnerable to CVE-2023-34034 and CVE-2023-34035 used in IBM Maximo Application Suite - Monitor Component	26 Sep 202318:30	–	ibm
BDU FSTEC	The vulnerability of the Java framework for securing industrial applications, Spring Security, is related to the use of “***” as a template in the Spring Security configuration for WebFlux. This allows attackers to circumvent existing security restrictions.	19 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Java framework for securing industrial applications using Spring Security stems from configuration errors related to authentication. These errors can occur when using multiple servlets, including the DispatcherServlet in Spring MVC. This vulnerability allows attackers to expose sensitive information and enhance their privileges.	19 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-34035	18 Jul 202320:31	–	circl
CNNVD	Spring Security 安全漏洞	18 Jul 202300:00	–	cnnvd