CVE-2022-31690: Privilege Escalation in spring-security-oauth2-client

🗓️ 31 Oct 2022 16:41:00Reported by Steve RiesenbergType

spring🔗 spring.io👁 235 Views

CVE-2022-31690 Privilege Escalation in spring-security-oauth2-client fix released for scope mapping vulnerabilit

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6 addresses multiple security vulnerabilities	4 Sep 202311:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable unauthorized privilege escalation due to Spring Security (CVE-2022-31690)	10 Jan 202310:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Security affects IBM Process Mining . CVE-2022-31690	5 May 202315:10	–	ibm
CNNVD	VMware Spring Security 安全漏洞	31 Oct 202200:00	–	cnnvd
CVE	CVE-2022-31690	31 Oct 202200:00	–	cve
Cvelist	CVE-2022-31690	31 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-7201	3 Oct 202520:07	–	euvd
Github Security Blog	spring-security-oauth2-client vulnerable to Privilege Escalation	1 Nov 202212:00	–	github
NCSC	Vulnerabilities fixed in VMware Spring	4 Nov 202200:00	–	ncsc

31 Oct 2022 16:41Current

0.7Low risk

Vulners AI Score0.7

EPSS0.01011