ch.rasc:wamp2spring-security (=1.0.0), com.antelopesystem.authframework:auth-framework (=0.0.2) +177 more potentially affected by CVE-2019-3795 via org.springframework.security:spring-security-core (>=5.0.0.RELEASE <=5.0.11.RELEASE)

🗓️ 16 Apr 2019 15:10:59Reported by Vulners OSVType

vulnersosv

vulnersosv🔗 osv.dev👁 18 Views

Several dependencies transitively rely on spring-security-core affected by CVE-2019-3795.

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple vulnerabilities due to Spring Security	13 May 202214:58	–	ibm
CVE	CVE-2019-3795	9 Apr 201915:29	–	cve
Cvelist	CVE-2019-3795 Insecure Randomness When Using a SecureRandom Instance Constructed by Spring Security	9 Apr 201915:29	–	cvelist
Debian	[SECURITY] [DLA 1794-1] libspring-security-2.0-java security update	20 May 201903:52	–	debian
Tenable Nessus	Debian DLA-1794-1 : libspring-security-2.0-java security update	20 May 201900:00	–	nessus
EUVD	EUVD-2019-0437	7 Oct 202500:30	–	euvd
Github Security Blog	Spring Security uses insufficiently random values	16 Apr 201915:10	–	github

08 Nov 2023 04:01Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25

CVSS 3.15.3

CVSS 33.8

EPSS0.01884

CVE-2019-3795 spring security core transitive dependencies vulnerability advisory