Denial Of Service (DoS)

🗓️ 22 Apr 2022 01:30:09Reported by Veracode Vulnerability DatabaseType

Spring Security OAuth vulnerability to Denial of Servic

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: Spring Security OAuth Affects IBM Partner Engagement Manager (CVE-2022-22969)	22 Sep 202219:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Log4j 1.x	3 Aug 202216:43	–	ibm
ATTACKERKB	CVE-2022-22969	21 Apr 202219:15	–	attackerkb
Circl	CVE-2022-22969	21 Apr 202222:27	–	circl
CNNVD	Pivotal Spring Security OAuth 资源管理错误漏洞	21 Apr 202200:00	–	cnnvd
CNVD	Pivotal Spring Security Oauth Resource Management Error Vulnerability	24 Apr 202200:00	–	cnvd
CVE	CVE-2022-22969	21 Apr 202218:16	–	cve
Cvelist	CVE-2022-22969	21 Apr 202218:16	–	cvelist
EUVD	EUVD-2022-1699	3 Oct 202520:07	–	euvd
Github Security Blog	Denial of service in Spring Security OAuth2	22 Apr 202200:00	–	github

Vulners

Node

springframework spring-security-oauth2Range2.1.0.RELEASE–2.1.6.RELEASEjava

springframework spring-security-oauth2Range2.4.0.RELEASE–2.4.2.RELEASEjava

Source	Link
spring	www.spring.io/blog/2022/04/21/cve-report-published-for-spring-security-oauth
github	www.github.com/spring-projects/spring-security-oauth/issues/142
tanzu	www.tanzu.vmware.com/security/cve-2022-22969
github	www.github.com/spring-projects/spring-security-oauth/commit/3379a36e64c13e4118c7e179f3a874a64de5f5a2
github	www.github.com/spring-projects/spring-security-oauth/commit/2b58aafecac336e82f20ea43da9b208b0a4a40dd
github	www.github.com/spring-projects/spring-security-oauth/commit/e96d2c738757146234c7e8a1962a7a755776b512
oracle	www.oracle.com/security-alerts/cpujul2022.html

09 Aug 2023 14:51Current

3.9Low risk

Vulners AI Score3.9

CVSS 24

CVSS 3.16.5

EPSS0.00587