Pivotal Spring Security vulnerabilities
3 published CVEs name Pivotal Spring Security among the affected products.
- Published CVEs
- 3
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 2Medium 0Low 0Not scored 0
Newest CVEs
- CVE-2016-5007
Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping…
Pivotal · Spring Security
High7.5 - CVE-2014-3527
When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a…
Pivotal · Spring Security
Critical9.8 - CVE-2014-0097
The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous…
Pivotal · Spring Security
High7.3