com.ctlok:spring-webmvc-rythm (>=1.3.6, <=1.4.2), com.github.dblock.waffle:waffle-spring-security3 (>=1.5, <=1.6) +171 more potentially affected by CVE-2012-5055 via org.springframework.security:spring-security-core (>=3.1.0.release, <=3.1.2.release)

org.springframework.security:spring-security-core MAVEN version =3.1.0.release, =1.3.6, =1.5, =1.0.0, =3.0.4, =3.3, =1.1.3, =1.1.4, =1.1.3, =1.0.2, =1.0.3 - com.racquettrack:spring-security-oauth2-client 1.4 - com.sitewhere:sitewhere-core 0.9.7 and more Source cves: CVE-2012-5055 Source advisory:...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=3.0.1), br.net.woodstock.rockframework:rockframework-persistence (>=2.0.0, <=2.0.8) +270 more potentially affected by CVE-2012-5055 via org.springframework.security:spring-security-core (>=3.0.0.release, <=3.0.7.release)

org.springframework.security:spring-security-core MAVEN version =3.0.0.release, =1.2.1, =2.0.0, =22.0.2-beta, =1.0.0-beta-1, =3.0.2, =3.0.0, =1.2.0, =1.1, =0.1, =1.2-1, =1.0, =1.0.2 - com.revolsys.open:com.revolsys.open.gis.web 2011.11.07.release and more Source cves: CVE-2012-5055 Source advisor...

CVE-2012-5055

DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of logi...

CVE-2012-5055

DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of logi...

CVE-2012-5055

CVE-2012-5055 affects VMware SpringSource Spring Security: DaoAuthenticationProvider does not compare the password when the username is not found, causing a shorter response delay that could enable remote attackers to enumerate valid usernames via login requests. Affected versions include Spring ...