libspring-security-2.0-java - security update

Fixed packages 1

Vulnerabilities 1

• High 7.3
  CVE-2019-11272

  PlaintextPasswordEncoder authenticates encoded passwords that are null

  Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an application using an affected version of Spring Security is leveraging PlaintextPasswordEncoder and a user has a nu…

  Spring Spring Security org.springframework.security:spring-security-core org.springframework.security:spring-security-cas Maven
  Jun 26, 2019