Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-3295-h9qx-r82x
Advisory ID github_osv/GHSA-3295-h9qx-r82x
Aliases CVE-2010-3700
Summary Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-288 Authentication Bypass Using an Alternate Path or Channel
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
https://issues.apache.org/bugzilla/show_bug.cgi?id=25015
https://web.archive.org/web/20110802082343/http://www.springsource.com/security/cve-2010-3700
CVE-2010-3700 https://nvd.nist.gov/vuln/detail/CVE-2010-3700
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.