Improper Logout Implementation

🗓️ 21 Apr 2023 02:20:15Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 95 Views

Improper logout vulnerability in SwitchUserFilter

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Jun 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Security affects IBM Process Mining . CVE-2023-20862	27 Jun 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2	7 May 202419:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager May 2023 - Multiple CVEs	7 Jun 202307:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Common Licensing's Administration And Reporting Tool (ART) and IBM LKS Administration Agent are affected by Spring Framework vulnerabilities.	30 Jul 202416:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in VMware Tanzu Spring Security (CVE-2023-20862)	20 Jul 202316:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	31 May 202319:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Web Query for i is vulnerable to a remote attacker bypassing security restrictions or executing arbitrary code, to a local authenticated attacker obtaining sensitive information, or to denial of service.	3 Jan 202420:25	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Security is vulnerable to CVE-2022-31692 and CVE-2023-20862 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202320:36	–	ibm
Atlassian	Update Spring-Security used on Bitbucket to fix CVE-2023-20862	23 Jun 202319:25	–	atlassian

Vulners

Node

springframework spring-security-webRange6.0.0-M1–6.0.2java

OR

springframework spring-security-webRange5.8.0-M1–5.8.2java

OR

springframework spring-security-webRange5.7.0-M1–5.7.7java

OR

springframework spring-security-webMatch6.1.0-m1java

Source	Link
spring	www.spring.io/security/cve-2023-20862
github	www.github.com/spring-projects/spring-security/issues/12834
github	www.github.com/spring-projects/spring-security/commit/84cca81edf78a0f0c46aaf8d4834cd5f41de8143
github	www.github.com/spring-projects/spring-security/issues/12504
github	www.github.com/advisories/GHSA-x873-6rgc-94jc
security	www.security.netapp.com/advisory/ntap-20230526-0002/

05 Feb 2025 17:36Current

8.7High risk

Vulners AI Score8.7

CVSS 3.16.3

EPSS0.00461

SSVC

spring-security-web switchuserfilter.java improper logout vulnerable serialized versions attacker logout