Authorization

2018-05-1120:29:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.2%

JSON

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

CPENameOperatorVersion
oncommand_unified_managerge7.3
oncommand_unified_managerge9.4
agile_plmeq9.3.3
agile_plmeq9.3.4
agile_plmeq9.3.5
agile_plmeq9.3.6
application_testing_suiteeq12.5.0.3
application_testing_suiteeq13.1.0.1
application_testing_suiteeq13.2.0.1
application_testing_suiteeq13.3.0.1

Name	Operator	Version
oncommand_unified_manager	ge	7.3
oncommand_unified_manager	ge	9.4
agile_plm	eq	9.3.3
agile_plm	eq	9.3.4
agile_plm	eq	9.3.5
agile_plm	eq	9.3.6
application_testing_suite	eq	12.5.0.3
application_testing_suite	eq	13.1.0.1
application_testing_suite	eq	13.2.0.1
application_testing_suite	eq	13.3.0.1