vmware spring framework 5.0.5 vulnerabilities and exploits

(subscribe to this query)

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

Pivotal Software Spring Security Vmware Spring Framework 5.0.5 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.4 Oracle Agile Plm 9.3.5 Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 10.1 Oracle Application Testing Suite 12.5.0.3 Oracle Application Testing Suite 13.1.0.1 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Big Data Discovery 1.6.0 Oracle Communications Converged Application Server Oracle Communications Diameter Signaling Router Oracle Communications Network Integrity Oracle Communications Performance Intelligence Center Oracle Communications Services Gatekeeper Oracle Endeca Information Discovery Integrator 3.1.0 Oracle Endeca Information Discovery Integrator 3.2.0 Oracle Enterprise Manager For Mysql Database 13.2 Oracle Enterprise Manager Ops Center 12.2.2 Oracle Enterprise Manager Ops Center 12.3.3

Spring Framework, versions 5.0 before 5.0.5 and versions 4.3 before 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to th...

Vmware Spring Framework Oracle Retail Xstore Point Of Service 7.1 Oracle Enterprise Manager Ops Center 12.2.2 Oracle Primavera Gateway 16.2 Oracle Primavera Gateway 15.2 Oracle Application Testing Suite 12.5.0.3 Oracle Retail Back Office 14.1 Oracle Retail Back Office 14.0 Oracle Enterprise Manager Ops Center 12.3.3 Oracle Retail Open Commerce Platform 6.0.1 Oracle Application Testing Suite 13.1.0.1 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Communications Diameter Signaling Router Oracle Communications Performance Intelligence Center Oracle Communications Services Gatekeeper Oracle Health Sciences Information Manager 3.0 Oracle Healthcare Master Person Index 3.0 Oracle Healthcare Master Person Index 4.0 Oracle Insurance Calculation Engine 10.2 Oracle Insurance Rules Palette 10.0 Oracle Insurance Rules Palette 10.2

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook