Improper Access Control

🗓️ 19 Mar 2024 16:37:15Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 34 Views

Improper access control due to Authentication Bypass in org.springframework.security:spring-security-cor

Reporter	Title	Published	Views	Family All 52
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for May 2024 - Multiple CVEs addressed	14 Jun 202409:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-security-core-5.8.5.jar	7 Jul 202517:51	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	17 Jun 202420:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to multiple issues due to VMware Tanzu Spring	12 Jun 202409:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services - April 2024 -Multiple CVEs addressed	9 May 202407:13	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring Framework is vulnerable to multiple security CVEs used in IBM Maximo Application Suite - Monitor Component	6 May 202416:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.5 addresses multiple security vulnerabilities.	3 Feb 202523:04	–	ibm
Atlassian	org.springframework.security:spring-security-core Dependency in Bamboo Data Center and Server	12 Apr 202401:11	–	atlassian
Atlassian	Improper Authorization org.springframework.security:spring-security-core Dependency in Bitbucket Data Center and Server	12 Apr 202400:13	–	atlassian
Atlassian	Improper Authorization org.springframework.security:spring-security-core Dependency in Confluence Data Center and Server	16 May 202405:11	–	atlassian

Vulners

Node

springframework spring-security-coreRange5.8.0-M1–5.8.10java

springframework spring-security-coreRange6.0.0-M1–6.0.8java

springframework spring-security-coreRange2.0-M1–5.7.11java

springframework spring-security-coreRange6.2.0-M1–6.2.2java

springframework spring-security-coreRange6.1.0-M1–6.1.7java

Source	Link
github	www.github.com/spring-projects/spring-security/issues/14666
github	www.github.com/spring-projects/spring-security/commit/5a7f12f1a9fdb4edaab6f61495f1d781a7273b61
security	www.security.netapp.com/advisory/ntap-20240419-0005/
spring	www.spring.io/security/cve-2024-22257

13 Feb 2025 19:28Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.18.2

EPSS0.00264

SSVC