Lucene search
HistoryOct 29, 2010 - 7:00 p.m.
CVE-2010-3700
cve-2010-3700
vmware
springsource
spring security
acegi security
ibm
websphere
application server
remote attack
security bypass
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.
Affected configurations
Node
acegisecurityacegi-securityMatch1.0.0
ORacegisecurityacegi-securityMatch1.0.1
ORacegisecurityacegi-securityMatch1.0.2
ORacegisecurityacegi-securityMatch1.0.3
ORacegisecurityacegi-securityMatch1.0.4
ORacegisecurityacegi-securityMatch1.0.5
ORacegisecurityacegi-securityMatch1.0.6
ORacegisecurityacegi-securityMatch1.0.7
ORvmwarespringsource_spring_securityMatch2.0.0
ORvmwarespringsource_spring_securityMatch2.0.1
ORvmwarespringsource_spring_securityMatch2.0.2
ORvmwarespringsource_spring_securityMatch2.0.3
ORvmwarespringsource_spring_securityMatch2.0.4
ORvmwarespringsource_spring_securityMatch2.0.5
ORvmwarespringsource_spring_securityMatch3.0.0
ORvmwarespringsource_spring_securityMatch3.0.1
ORvmwarespringsource_spring_securityMatch3.0.2
ORvmwarespringsource_spring_securityMatch3.0.3
ibmwebsphere_application_serverMatch6.1
ORibmwebsphere_application_serverMatch7.0
Related
nvd
nvd
CVE-2010-3700
2010-10-29 19:00:02
prion
prion
Design/Logic Flaw
2010-10-29 19:00:00
securityvulns
securityvulns
CVE-2010-3700: Spring Security bypass of security constraints
2010-11-01 00:00:00
packetstorm
packetstorm
Spring Security Security Constraint Bypass
2010-10-28 00:00:00
osv
osv
github
github
cvelist
cvelist
CVE-2010-3700
2010-10-29 18:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.1%
Related for CVE-2010-3700