Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security

2022-05-1704:59:50

Google

osv.dev

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.0%

JSON

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread.

CPENameOperatorVersion
org.springframework.security:spring-security-coreeq3.0.1.RELEASE
org.springframework.security:spring-security-coreeq3.0.4.RELEASE
org.springframework.security:spring-security-coreeq2.0.1
org.springframework.security:spring-security-coreeq2.0.0
org.springframework.security:spring-security-coreeq2.0.5.RELEASE
org.springframework.security:spring-security-coreeq3.0.2.RELEASE
org.springframework.security:spring-security-coreeq2.0.2
org.springframework.security:spring-security-coreeq2.0.3
org.springframework.security:spring-security-coreeq3.0.0.RELEASE
org.springframework.security:spring-security-coreeq2.0.4

Name	Operator	Version
org.springframework.security:spring-security-core	eq	3.0.1.RELEASE
org.springframework.security:spring-security-core	eq	3.0.4.RELEASE
org.springframework.security:spring-security-core	eq	2.0.1
org.springframework.security:spring-security-core	eq	2.0.0
org.springframework.security:spring-security-core	eq	2.0.5.RELEASE
org.springframework.security:spring-security-core	eq	3.0.2.RELEASE
org.springframework.security:spring-security-core	eq	2.0.2
org.springframework.security:spring-security-core	eq	2.0.3
org.springframework.security:spring-security-core	eq	3.0.0.RELEASE
org.springframework.security:spring-security-core	eq	2.0.4