com.github.jackpanz:maccloud-core (>=2.4.7, <=2.4.8), com.gwtincubator:gwt-incubator-security (1.0.1) +74 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (2.0.4)

org.springframework.security:spring-security-core MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.jackpanz:maccloud-core =2.4.7, =1.1-1, =1.1-2 -...

com.evasion:api (>=1.0.0.1, <=1.0.0.3), com.evasion:application-ear (>=1.0.0.1, <=1.0.0.3) +43 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (2.0.5.release)

org.springframework.security:spring-security-core MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.evasion:api =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0....

com.myjeeva:spring-extensions (>=1.0.0, <=1.0.1), org.springframework.security:spring-security-acl (2.0.6.release) +6 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (2.0.6.release)

org.springframework.security:spring-security-core MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.myjeeva:spring-extensions =1.0.0, =1.0.1 -...

com.github.dblock.waffle:waffle-spring-security2 (>=1.5, <=1.6), com.microsoftopentechnologies:azure-slave (>=0.1.0, <=0.3.0) +201 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (2.0.7.release)

org.springframework.security:spring-security-core MAVEN version 2.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.5...

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

org.codehaus.enunciate:enunciate-spring-security-rt (>=1.20, <=1.22), org.codehaus.spring-security-oauth:spring-security-oauth (>=2.4, <=3.19) +20 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (2.0.3)

org.springframework.security:spring-security-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.codehaus.enunciate:enunciate-spring-security-rt =1.20,...

at.molindo.social:spring-social-security (1.1.0.release), cn.jhc:spring-social-qq (>=0.0.2, <=0.0.5) +395 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (>=3.2.0.release, <=3.2.4.release)

org.springframework.security:spring-security-core MAVEN version =3.2.0.release, =0.0.2, =1.0-release, =1.0.1, =1.1.2, =1.2.0, =1.2.5 and more Source cves: CVE-2014-3527 Source advisory: OSV:GHSA-WMV4-5W76-VP9G...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3), br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=3.0.1) +542 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (>=3.0.0.release, <=3.1.6.release)

org.springframework.security:spring-security-core MAVEN version =3.0.0.release, =0.3.3, =1.2.1, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.1, =1.2.1, =1.3.6, =22.0.2-beta, =1.0.0-alpha2, =1.0.0-beta-1, =1.5, =1.0.0, =1.1.0 and more Source cves: CVE-2014-3527 Source advisory: OSV:GHSA-WMV4-5W76-VP9G...

at.molindo.social:spring-social-security (1.1.0.release), cn.jhc:spring-social-qq (>=0.0.2, <=0.0.5) +395 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (>=3.2.0.release, <=3.2.4.release)

org.springframework.security:spring-security-core MAVEN version =3.2.0.release, =0.0.2, =1.0-release, =1.0.1, =1.1.2, =1.2.0, =1.2.5 and more Source cves: CVE-2014-3527 Source advisory: GHSA-WMV4-5W76-VP9G...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3), br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=3.0.1) +542 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (>=3.0.0.release, <=3.1.6.release)

org.springframework.security:spring-security-core MAVEN version =3.0.0.release, =0.3.3, =1.2.1, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.1, =1.2.1, =1.3.6, =22.0.2-beta, =1.0.0-alpha2, =1.0.0-beta-1, =1.5, =1.0.0, =1.1.0 and more Source cves: CVE-2014-3527 Source advisory: GHSA-WMV4-5W76-VP9G...

com.github.dblock.waffle:waffle-spring-security2 (>=1.7, <=1.7.5), com.googlecode.cedar-common:cedar-common-gae (>=2.1.3, <=5.8.4) +12 more potentially affected by CVE-2014-3527 via org.springframework.security:spring-security-core (2.0.8.release)

org.springframework.security:spring-security-core MAVEN version 2.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.7...

com.github.dblock.waffle:waffle-spring-security3 (>=1.5, <=1.6), com.paddypowerbetfair.springframework:spring-security-saml-keys-rollover (1.0.2) +45 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.1.2.release)

org.springframework.security:spring-security-core MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security3 =1.5...

com.evasion:api (>=1.0.0.1, <=1.0.0.3), com.evasion:application-ear (>=1.0.0.1, <=1.0.0.3) +43 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (2.0.5.release)

org.springframework.security:spring-security-core MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.evasion:api =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0....

com.racquettrack:spring-security-oauth2-client (1.4), com.sitewhere:sitewhere-core (0.9.7) +40 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (3.1.1.release)

org.springframework.security:spring-security-core MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.racquettrack:spring-security-oauth2-client 1.4 -...

am.ik.servicebroker:cloud-karafka-service-broker (>=0.0.2, <=0.0.3), am.ik.servicebroker:shared-smysql-service-broker (>=0.0.3, <=0.0.5) +1269 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (>=5.0.0.release, <=5.0.15.release)

org.springframework.security:spring-security-core MAVEN version =5.0.0.release, =0.0.2, =0.0.3, =0.0.1, =1.0.1.release, =2.0.0, =1.0.0, =1.0.0, =2.0.0, =2.0.0, =2.0.0, =3.0.0.release, =3.0.1.release and more Source cves: CVE-2020-5408 Source advisory: GHSA-2PPP-9496-P23Q...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.2, <=0.1.6) +1973 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (>=5.1.0.release, <=5.1.9.release)

org.springframework.security:spring-security-core MAVEN version =5.1.0.release, =4.4.0.0, =0.1.2, =0.5.0, =0.5.21 - am.ik.servicebroker:cloud-karafka-service-broker 0.1.0 - au.net.causal.shoelaces:shoelaces-apphome-integration-tests-common 2.0 -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.11), ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7) +2380 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (>=4.0.0.release, <=4.2.15.release)

org.springframework.security:spring-security-core MAVEN version =4.0.0.release, =0.1.8, =0.1.6, =0.1.4-sb1x, =1.0.0, =1.0.0, =1.0.0, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 and more Source cves: CVE-2020-5408 Source advisory: GHSA-2PPP-9496-P23Q...

Insufficient Entropy in Spring Security

Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector with CBC Mode in the implementation of the queryable text encryptor. A malicious user with access to the data that has...

ai.hyacinth.framework:core-service-gateway-server (0.5.24), au.org.consumerdatastandards:data-holder (>=1.0.0, <=1.12.0) +1448 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (>=5.2.0.release, <=5.2.3.release)

org.springframework.security:spring-security-core MAVEN version =5.2.0.release, =1.0.0, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.9, =0.0.12 - br.com.damsete:logging 0.0.1 - cc.cc4414:cc-spring-auth-server 0.5.1 - cc.cc4414:cc-spring-resource-starter 0.5.1 -...

com.buession.cas:buession-cas-core (>=1.1.1, <=1.1.2), com.buession.cas:buession-cas-metrics (>=1.1.1, <=1.1.2) +525 more potentially affected by CVE-2020-5408 via org.springframework.security:spring-security-core (>=5.3.0.release, <=5.3.1.release)

org.springframework.security:spring-security-core MAVEN version =5.3.0.release, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =1.0.0, =5.15.0, =5.16.0 and more Source cves: CVE-2020-5408 Source advisory: GHSA-2PPP-9496-P23Q...