Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2022/05/17 4:59 a.m.•41 views

Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

5.1CVSS6.8AI score0.01256EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/05/17 4:59 a.m.•78 views

GHSA-4644-HG35-55M9 Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

5.1CVSS6.4AI score0.01256EPSS
SaveExploits0References4
NVD
NVD
•added 2012/12/05 5:55 p.m.•40 views

CVE-2011-2731

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

5.1CVSS6.6AI score0.01256EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2012/12/05 5:55 p.m.•46 views

CVE-2011-2731

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

5.1CVSS5.9AI score0.01256EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/12/05 12:00 a.m.•3 views

CVE-2011-2731: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

5.1CVSS5.8AI score0.01256EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2011/09/13 12:00 a.m.•107 views

CVE-2011-2731: Spring Security privilege escalation when using RunAsManager

CVE-2011-2731: Spring Security privilege escalation when using RunAsManager Severity: Moderate Versions Affected: 2.0.0 to 2.0.6 3.0.0 to 3.0.5 Earlier versions may also be affected Description: Spring Security provides a mechanism RunAsManager to allow particular operations to run with a differe...

5.1CVSS1.1AI score0.01256EPSS
SaveExploits0
Rows per page
Query Builder