Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
springRob WinchSPRING:0A400737352FF4B32CD8407A2515D57D
HistoryMay 16, 2022 - 5:32 a.m.

CVE-2022-22976: BCrypt skips salt rounds for work factor of 31

2022-05-1605:32:00
Rob Winch
spring.io
56
cve-2022-22976
bcrypt
salt rounds
spring security 5.7.0
spring security 5.6.4
spring security 5.5.7

EPSS

0.009

Percentile

82.3%

JSON

Spring Security 5.7.0, 5.6.4, 5.5.7 were released to fix CVE-2022-22976: BCrypt skips salt rounds for work factor of 31. Please update as soon as possible.

Related

spring 1
ibm 12
veracode 2
osv 4
githubexploit 8
ubuntucve 2
nvd 2
redhatcve 2
nessus 5
github 2
cvelist 2
prion 2
cve 2
qualysblog 1
redhat 3
oracle 4
spring
spring
CVE-2022-22978: Authorization Bypass in RegexRequestMatcher
2022-05-16 05:27:00
ibm
ibm
Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Spring Security
2023-05-17 19:47:18
Security Bulletin: spring-security (Publicly disclosed vulnerability) Affects IBM Partner Engagement Manager (CVE-2022-22978)
2022-09-22 19:12:44
Security Bulletin: Vulnerability in Spring Security affects IBM Process Mining . CVE-2022-22978
2023-06-27 11:07:53
veracode
veracode
Integer Overflow
2022-05-20 04:01:08
Authorization Bypass
2022-05-20 13:00:01
osv
osv
CVE-2022-22976
2022-05-19 15:15:08
CVE-2022-22978
2022-05-19 15:15:08
Authorization bypass in Spring Security
2022-05-20 00:00:39
githubexploit
githubexploit
Exploit for Integer Overflow or Wraparound in Vmware Spring Security
2022-05-10 16:36:13
Exploit for Incorrect Authorization in Vmware Spring Security
2023-03-16 09:34:17
Exploit for Incorrect Authorization in Vmware Spring Security
2022-07-13 12:38:26
ubuntucve
ubuntucve
CVE-2022-22976
2022-05-19 00:00:00
CVE-2022-22978
2022-05-19 00:00:00
nvd
nvd
CVE-2022-22976
2022-05-19 15:15:08
CVE-2022-22978
2022-05-19 15:15:08
redhatcve
redhatcve
CVE-2022-22976
2022-05-17 16:10:13
CVE-2022-22978
2022-05-18 22:58:31
nessus
nessus
Spring Security < 5.5.7 / 5.6.x < 5.6.4 Authorization Bypass
2023-01-26 00:00:00
Oracle MySQL Enterprise Monitor (Jan 2023 CPU)
2023-01-20 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3299)
2024-04-28 00:00:00
github
github
Integer overflow in BCrypt class in Spring Security
2022-05-20 00:00:38
Authorization bypass in Spring Security
2022-05-20 00:00:39
cvelist
cvelist
CVE-2022-22978
2022-05-19 00:00:00
CVE-2022-22976
2022-05-19 14:50:46
prion
prion
Integer overflow
2022-05-19 15:15:00
Authorization
2022-05-19 15:15:00
cve
cve
CVE-2022-22976
2022-05-19 15:15:08
CVE-2022-22978
2022-05-19 15:15:08
qualysblog
qualysblog
Oracle Patch Tuesday April 2023 Security Update Review
2023-04-19 11:47:21
redhat
redhat
(RHSA-2023:3299) Important: jenkins and jenkins-2-plugins security update
2023-05-24 17:06:51
(RHSA-2023:3663) Important: jenkins and jenkins-2-plugins security update
2023-06-19 10:09:14
(RHSA-2022:5532) Important: Red Hat Fuse 7.11.0 release and security update
2022-07-07 14:16:35
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00

EPSS

0.009

Percentile

82.3%

JSON
Related for SPRING:0A400737352FF4B32CD8407A2515D57D
spring1ibm12veracode2osv4githubexploit8ubuntucve2nvd2redhatcve2nessus5github2cvelist2prion2cve2qualysblog1redhat3oracle4