Product · Pivotal

Spring Security

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2014-3527

Authorization Bypass in Spring Security

When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication u…

Pivotal Spring Security org.springframework.security:spring-security-core Maven

May 25, 2017