Broken Access Control

org.springframework.security: spring-security-core is vulnerable to Broken Access Control. The vulnerability is due to incorrectly retuning a true return value from the AuthenticationTrustResolver.isFullyAuthenticated() method when a null authentication parameter is passed to it. This can result in bypassing access controls and an attacker gaining illegitimate access to the application.