CVE-2016-9879
1 advisory.
Maven/org.springframework.security:spring-security-core CVE-2016-9879: high 7.5
Security Constraint Bypass in Spring Security
Action: Upgrade org.springframework.security:spring-security-core to 3.2.10.RELEASE (3.2.x), 4.1.4.RELEASE (4.1.x) or 4.2.1.RELEASE (4.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.10.RELEASE | - |
| 4.0.0.RELEASE | 4.1.4.RELEASE | - |
| 4.2.0.RELEASE | 4.2.1.RELEASE | - |
Fixed versions
| 3.2.10.RELEASE | 4.1.4.RELEASE | 4.2.1.RELEASE |
Sources
- osv: GHSA-v35c-49j6-q8hq
- https://nvd.nist.gov/vuln/detail/CVE-2016-9879
- https://access.redhat.com/errata/RHSA-2017:1832
- https://pivotal.io/security/cve-2016-9879
- http://www.securityfocus.com/bid/95142
CVE-2016-9879 · published · modified · JSON