CVE-2011-2731 Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security
MediumCVSS 5.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.springframework.security/spring-security-core(Maven) | < 2.0.7 | 2.0.7 |
| org.springframework.security/spring-security-core(Maven) | >= 3.0.0, < 3.0.6 | 3.0.6 |
| org.springframework.security/spring-security-core(Maven) | = 2.0.0 | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 2.0.1 | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 2.0.2 | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 2.0.3 | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 2.0.4 | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 2.0.5.RELEASE | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 2.0.6.RELEASE | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 3.0.0.RELEASE | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 3.0.1.RELEASE | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 3.0.2.RELEASE | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 3.0.3.RELEASE | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 3.0.4.RELEASE | No fix listed |
| org.springframework.security/spring-security-core(Maven) | = 3.0.5.RELEASE | No fix listed |
| VMware springsource spring security | <= 2.0.6 | No fix listed |
| VMware springsource spring security | <= 3.0.5 | No fix listed |
| VMware springsource spring security | = 2.0.0 | No fix listed |
| VMware springsource spring security | = 2.0.1 | No fix listed |
| VMware springsource spring security | = 2.0.2 | No fix listed |
| VMware springsource spring security | = 2.0.3 | No fix listed |
| VMware springsource spring security | = 2.0.4 | No fix listed |
| VMware springsource spring security | = 2.0.5 | No fix listed |
| VMware springsource spring security | = 3.0.0 | No fix listed |
| VMware springsource spring security | = 3.0.1 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware springsource spring security | = 3.0.2 | No fix listed |
| VMware springsource spring security | = 3.0.3 | No fix listed |
| VMware springsource spring security | = 3.0.4 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugs.debian.org
- support.springsource.com vendor-advisory
- github.com
- github.com product
- 55155 third-party-advisory
- 1029151 vdb-entry