Red Hat JBoss Fuse 6/spring-security
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated | org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins | MavenRed Hat | High | Fix reported | |
| Access Control Bypass in Spring Security | org.springframework.security:spring-security-configRed Hat JBoss Fuse 6/spring-security | MavenRed Hat | Critical | Fix reported | |
| Spring Security authorization rules can be bypassed via forward or include dispatcher types | org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins | MavenRed Hat | Critical | Fix reported | |
| Spring Security logout not clearing security context | org.springframework.security:spring-security-coreRed Hat Decision Manager 7/spring-security | MavenRed Hat | Medium | Fix reported |