Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

vmware spring security 3.2.4 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2014-3527
When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication uses the information f...
Vmware Spring Security 3.1.0Vmware Spring Security 3.1.1Vmware Spring Security 3.1.2Vmware Spring Security 3.1.4Vmware Spring Security 3.2.1Vmware Spring Security 3.2.2Vmware Spring Security 3.2.3Vmware Spring Security 3.2.4Vmware Spring Security 3.1.3Vmware Spring Security 3.2.0
5
CVSSv2
CVE-2016-9879
An issue exists in Pivotal Spring Security prior to 3.2.10, 4.1.x prior to 4.1.4, and 4.2.x prior to 4.2.1. Spring Security does not consider URL path parameters when processing security constraints. By adding a URL path parameter with an encoded "/" to a request, an at...
Vmware Spring Security 4.1.3Vmware Spring Security 4.1.2Vmware Spring Security 3.2.5Vmware Spring Security 3.2.4Vmware Spring Security 4.1.1Vmware Spring Security 4.1.0Vmware Spring Security 3.2.3Vmware Spring Security 3.2.2Vmware Spring Security 3.2.7Vmware Spring Security 3.2.6Vmware Spring Security 4.2.0Vmware Spring Security 3.2.9Vmware Spring Security 3.2.8Vmware Spring Security 3.2.1Vmware Spring Security 3.2.0Ibm Websphere Application Server 8.5.5.6Ibm Websphere Application Server 8.5.5.5Ibm Websphere Application Server 8.5.5.4Ibm Websphere Application Server 8.5.5.3Ibm Websphere Application Server 8.5.5.2Ibm Websphere Application Server 8.5.5.9Ibm Websphere Application Server 8.5.5.1
5
CVSSv2
CVE-2016-9878
An issue exists in Pivotal Spring Framework prior to 3.2.18, 4.2.x prior to 4.2.9, and 4.3.x prior to 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.
Vmware Spring Framework 4.3.1Pivotal Software Spring Framework 4.3.0Vmware Spring Framework 4.2.8Vmware Spring Framework 4.2.1Pivotal Software Spring Framework 4.2.0Vmware Spring Framework 3.2.11Vmware Spring Framework 3.2.10Vmware Spring Framework 3.2.2Vmware Spring Framework 3.2.1Vmware Spring Framework 4.2.7Vmware Spring Framework 4.2.6Vmware Spring Framework 3.2.17Vmware Spring Framework 3.2.16Vmware Spring Framework 3.2.9Vmware Spring Framework 3.2.8Pivotal Software Spring FrameworkVmware Spring Framework 4.3.4Vmware Spring Framework 4.2.5Vmware Spring Framework 4.2.4Vmware Spring Framework 3.2.15Vmware Spring Framework 3.2.14Vmware Spring Framework 3.2.7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook