Broken Access Control

org.springframework.security: spring-security-core is vulnerable to Broken Access Control. The vulnerability is due to incorrectly retuning a true return value from the AuthenticationTrustResolver.isFullyAuthenticated method when a null authentication parameter is passed to it. This can result in...