Design/Logic Flaw

2010-10-2919:00:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.1%

JSON

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

CPENameOperatorVersion
acegi-securityeq1.0.0
acegi-securityeq1.0.1
acegi-securityeq1.0.2
acegi-securityeq1.0.3
acegi-securityeq1.0.4
acegi-securityeq1.0.5
acegi-securityeq1.0.6
acegi-securityeq1.0.7
websphere_application_servereq6.1
websphere_application_servereq7.0

Name	Operator	Version
acegi-security	eq	1.0.0
acegi-security	eq	1.0.1
acegi-security	eq	1.0.2
acegi-security	eq	1.0.3
acegi-security	eq	1.0.4
acegi-security	eq	1.0.5
acegi-security	eq	1.0.6
acegi-security	eq	1.0.7
websphere_application_server	eq	6.1
websphere_application_server	eq	7.0