Skip to content
OpenAdvisories

Package · Wolfi

jenkins-2-openjdk-25

24 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    User Attribute Enumeration when Using DaoAuthenticationProvider

    Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnabled, #isAccountNonExpired, or #isAccountNonLocked user attributes, to enable, expire, or lock users, then DaoAuthenticationProvider's timing attack defense can be bypass…