Integer Overflow

org.springframework.security:spring-security-crypto is vulnerable to integer overflows. The encoder does not perform any salt rounds when the BCrypt class is used with the maximum work factor(31), allowing a local authenticated attacker to cause an integer overflow error resulting in the attacker gaining access to sensitive user information.