VMware Spring Security 5.7.9

CPE Details

VMware Spring Security 5.7.9
vmware
spring_security
5.7.9
2023-07-28
11h35 +00:00
2023-08-03
00h41 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:vmware:spring_security:5.7.9:*:*:*:*:*:*:*

Informations

Vendor

vmware

Product

spring_security

Version

5.7.9

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-34042 2024-02-05 22h00 +00:00 The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be written by anyone with access to the file system. While there are no known exploits, this is an example of “CWE-732: Incorrect Permission Assignment for Critical Resource” and could result in an exploit. Users should update to the latest version of Spring Security to mitigate any future exploits found around this issue.
5.5
Medium
CVE-2023-34034 2023-07-19 14h16 +00:00 Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.
9.8
Critical