VMware / Springsource Spring Security

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2012-5055	Security: Ability to determine if username is valid via DaoAuthenticationProvider	MEDIUM	5.0	Dec 5, 2012
CVE-2011-2732	Security: Header injection flaw due improper use of 'spring-security-redirect' parameter	MEDIUM	4.3	Dec 5, 2012
CVE-2011-2731	Security: Privilege escalation by using RunAsManager mechanism	MEDIUM	5.1	Dec 5, 2012
CVE-2010-3700	VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server…	MEDIUM	5.0	Oct 29, 2010

Rows per page

Showing 1 to 4 of 4 CVEs