acegisecurity vulnerabilities

Products

• acegi-security 1

Latest acegisecurity CVEs

Newest publication first

1. CVE-2010-3700 Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security

   Published 2010-10-29

   Medium·CVSS 5.0 EPSS 1.7%

   VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.