Springsource Spring Security (Vmware) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 18 known versions, newest CVE from 2012-12-05. Vendor: Vmware.

CVEs of Springsource Spring Security

• CVE-2011-2732 - CVSS 4.3 (medium), 2012-12-05: CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to…
• CVE-2011-2731 - CVSS 5.1 (medium), 2012-12-05: Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in…
• CVE-2012-5055 - CVSS 5 (medium), 2012-12-05: DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the…
• CVE-2010-3700 - CVSS 5 (medium), 2010-10-29: VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server…