Security
English
همهٔ محصولات

Red Hat Fuse 7/spring-security-core

Red Hat · بسته
14 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
Spring Security Core has a TOCTOU race condition when One-Time Token login with JdbcOneTimeTokenService is configuredCVE-2026-22751 · GHSA-X2WQ-9X2F-FHJ7 org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat متوسط اصلاح گزارش شده
Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProviderCVE-2026-22746 · GHSA-VXF7-QJ7Q-83FH org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat کم اصلاح گزارش شده
Spring Security has Potential Security Misconfiguration when Using withIssuerLocationCVE-2026-22748 · GHSA-CVC6-Q2CP-2XHW org.springframework.security:spring-security-oauth2-joseOpenShift Developer Tools and Services/jenkins MavenRed Hat متوسط اصلاح گزارش شده
Spring Security Doesn't Correctly Include Servlet Path in Path Matching of HttpSecurity#securityMatchersCVE-2026-22753 · GHSA-4WRG-8WPC-H923 org.springframework.security:spring-security-configOpenShift Developer Tools and Services/jenkins MavenRed Hat زیاد اصلاح گزارش شده
Spring Security HTTP Headers Are not Written Under Some ConditionsCVE-2026-22732 · GHSA-MF92-479X-3373 org.springframework.security:spring-security-webOpenShift Developer Tools and Services/jenkins MavenRed Hat بحرانی اصلاح گزارش شده
Spring Security annotation detection mechanism has authorization bypassCVE-2025-41248 · GHSA-8V5Q-RHF3-JPHM org.springframework.security:spring-security-coreRed Hat Data Grid 8/spring-security-core MavenRed Hat زیاد اصلاح گزارش شده
Spring Framework has Authorization Bypass for Case Sensitive ComparisonsCVE-2024-38827 · GHSA-Q3V6-HM2V-PW99 org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/spring-security-core MavenRed Hat متوسط اصلاح گزارش شده
Spring Security Does Not Enforce Password LengthCVE-2025-22228 · GHSA-MG83-C7GQ-RV5C org.springframework.security:spring-security-cryptoA-MQ Clients 2/spring-security-core MavenRed Hat زیاد اصلاح گزارش شده
Spring Security Vulnerable to Authorization Bypass via Security AnnotationsCVE-2025-22223 · GHSA-HH3M-G4QJ-4835 org.springframework.security:spring-security-coreRed Hat Fuse 7/org.apache.servicemix.bundles.spring-security-core MavenRed Hat متوسط اصلاح گزارش شده
Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvideCVE-2025-22234 · GHSA-VQXH-445G-37FC org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8 MavenRed Hat متوسط اصلاح گزارش شده
Spring Security uses insufficiently random valuesCVE-2019-3795 · GHSA-V2R2-7QM7-JJ6V org.springframework.security:spring-security-coreRed Hat Fuse 7/spring-security-core MavenRed Hat متوسط اصلاح گزارش شده
org.springframework.security/spring-security-core: Spring Security: Information disclosure via deterministic AES/CBC encryptionCVE-2026-47842 OpenShift Developer Tools and Services/jenkinsOpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8 Red Hat متوسط اصلاح اعلام نشده
org.springframework.security/spring-security-core: Spring Security: Information disclosure via timing attack in sensitive value comparisonCVE-2026-59276 OpenShift Developer Tools and Services/jenkinsOpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8 Red Hat متوسط اصلاح اعلام نشده
org.springframework.security/spring-security-core: Spring Security: Information disclosure due to incomplete internal network classificationCVE-2026-59277 OpenShift Developer Tools and Services/jenkinsOpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8 Red Hat کم اصلاح اعلام نشده