CVE-2024-22234

In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticatedAuthentication method. Specifically, an application is vulnerable if: The applicatio...

be.personify.iam:personify-frontend (>=1.5.1.release, <=1.5.2.release), br.com.m4rc310:br-com-m4rc310-gql (1.0.58) +1294 more potentially affected by CVE-2024-22234 via org.springframework.security:spring-security-core (>=6.1.0, <=6.1.6)

org.springframework.security:spring-security-core MAVEN version =6.1.0, =1.5.1.release, =1.1.4.2, =0.15.0-rc1, =0.15.0-rc1, =0.15.0-rc1, =1.0.3, =1.0.12, =1.0.3, =1.0.0, =1.0.0, =1.0.20 and more Source cves: CVE-2024-22234 Source advisory: MEND:CVE-2024-22234...

CVE-2024-22234 CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated

In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticatedAuthentication method. Specifically, an application is vulnerable if: The applicatio...

CVE-2024-22234 CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated

In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticatedAuthentication method. Specifically, an application is vulnerable if: The applicatio...

CVE-2024-22234

CVE-2024-22234 (Spring Security) Affected: Spring Security 6.1.x prior to 6.1.7 and 6.2.x prior to 6.2.2.Vulnerability: Broken access control when an application directly calls AuthenticationTrustResolver.isFullyAuthenticated(Authentication) with a null parameter, which can erroneously return tru...

CVE-2024-22234 CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated

In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticatedAuthentication method. Specifically, an application is vulnerable if: The applicatio...

VMware Spring Security security vulnerability

Spring Security is a Spring-based enterprise applications can provide a declarative security access control solution for the security framework . It provides a set of beans that can be configured in the Spring application context , taking full advantage of the Spring IoC, DI Control Inversion...

CVE-2024-22234: Improper Access Control

In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticatedAuthentication method. Specifically, an application is vulnerable if: The applicatio...

PT-2024-1840

Name of the Vulnerable Software and Affected Versions Spring Security versions 6.1.x through 6.1.6 Spring Security versions 6.2.x through 6.2.1 Description The issue is related to broken access control in Spring Security when the AuthenticationTrustResolver.isFullyAuthenticatedAuthentication meth...

Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated

In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticatedAuthentication method. Specifically, an application is vulnerable if: An application...

spring-security: Empty SecurityContext Is Not Properly Saved Upon Logout

A flaw was found in Spring Security. In affected versions of Spring Security, the logout support does not properly clean the security context if using serialized versions. Additionally, it is not possible to explicitly save an empty security context to the HttpSessionSecurityContextRepository. Th...

com.github.grantjforrester:spring-security-jwt (1.0), com.malliina:mobile-push_2.12 (>=1.15.0, <=1.16.0) +2 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (6.4.2)

com.nimbusds:nimbus-jose-jwt MAVEN version 6.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.grantjforrester:spring-security-jwt 1.0 - com.malliina:mobile-push2.12 =1.15.0, =1.16.0 -...

org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-security-oauth2-jose (5.0.6.release_1), org.springframework.security:spring-security-oauth2-jose (5.0.6.release) potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (5.11)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-security-oauth2-jose 5.0.6.release1 -...

Incorrect File Permission

org.springframework.security: spring-security-config is vulnerable to Incorrect File Permissions. The vulnerability is due to insecure permissions assigned to the spring-security.xsd file inside the spring-security-config jar which is world writable. An attacker with access to the filesystem can...

cn.herodotus.engine:oauth2-sdk-authentication (>=3.1.1.0, <=3.1.4.3), cn.herodotus.engine:oauth2-sdk-authorization (>=3.1.1.0, <=3.1.4.3) +321 more potentially affected by CVE-2023-34042 via org.springframework.security:spring-security-config (>=6.1.1, <=6.1.3)

org.springframework.security:spring-security-config MAVEN version =6.1.1, =3.1.1.0, =3.1.1.0, =3.1.1.0, =3.1.1.0, =5.5.0, =5.5.0, =0.0.9, =0.0.12, =0.0.30, =0.0.42, =6.1.16, =6.1.16, =7.0.0, =7.1.8 and more Source cves: CVE-2023-34042 Source advisory: OSV:GHSA-9GP8-6CG8-7H34...

au.csiro.pathling:fhir-server (>=6.2.2, <=6.3.1), cc.hiver:hiver-core (>=1.0, <=1.0.4) +208 more potentially affected by CVE-2023-34042 via org.springframework.security:spring-security-config (>=5.7.9, <=5.7.10)

org.springframework.security:spring-security-config MAVEN version =5.7.9, =6.2.2, =1.0, =2.7.13.0, =2.7.14.0, =2.7.13.0, =2.7.14.0, =2.7.13.0, =1.0.1, =1.2.1.release - cn.structured:structure-oauth-common 1.0.1 - cn.structured:structure-oauth-resource-starter 1.0.1 -...

com.almis.awe:awe-annotation (>=4.7.1, <=4.7.7), com.almis.awe:awe-annotations-spring-boot-starter (>=4.7.1, <=4.7.7) +28 more potentially affected by CVE-2023-34042 via org.springframework.security:spring-security-config (>=6.0.4, <=6.0.6)

org.springframework.security:spring-security-config MAVEN version =6.0.4, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.7 - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter 4.0.0-m1 and more Source cves:...

com.epam.reportportal:service-authorization (>=5.11.0, <=5.11.1), com.erudika:para-jar (1.49.0) +51 more potentially affected by CVE-2023-34042 via org.springframework.security:spring-security-config (>=5.8.4, <=5.8.6)

org.springframework.security:spring-security-config MAVEN version =5.8.4, =5.11.0, =1.73.40, =1.73.40, =1.73.40, =1.73.40, =2.35.0, =2.14.0, =2.14.0, =11.3.6, =11.3.6, =11.3.6, =11.3.6, =11.4.2 and more Source cves: CVE-2023-34042 Source advisory: GHSA-9GP8-6CG8-7H34...

cn.herodotus.engine:oauth2-sdk-authentication (>=3.1.1.0, <=3.1.4.3), cn.herodotus.engine:oauth2-sdk-authorization (>=3.1.1.0, <=3.1.4.3) +321 more potentially affected by CVE-2023-34042 via org.springframework.security:spring-security-config (>=6.1.1, <=6.1.3)

org.springframework.security:spring-security-config MAVEN version =6.1.1, =3.1.1.0, =3.1.1.0, =3.1.1.0, =3.1.1.0, =5.5.0, =5.5.0, =0.0.9, =0.0.12, =0.0.30, =0.0.42, =6.1.16, =6.1.16, =7.0.0, =7.1.8 and more Source cves: CVE-2023-34042 Source advisory: GHSA-9GP8-6CG8-7H34...

GHSA-9GP8-6CG8-7H34 Spring Security's spring-security.xsd file is world writable

The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be written by anyone with access to the file system. While there are no known exploits, this is an example of “CWE-732: Incorrect Permission Assignment for Critical...