Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-cas@4.2.12.RELEASE
purl pkg:maven/org.springframework.security/spring-security-cas@4.2.12.RELEASE
Next non-vulnerable version 4.2.13.RELEASE
Latest non-vulnerable version 5.3.4.RELEASE
Risk score 3.3
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-v33x-prhc-gph5
Aliases:
CVE-2019-11272
Insufficiently Protected Credentials and Improper Authentication in Spring Security Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions …
4.2.13.RELEASE
Not vulnerable
CVE-2019-11272

Improper Authentication Spring Security support plain text passwords using `PlaintextPasswordEncoder`. a malicious user (or attacker) can authenticate using a password …
4.2.13.RELEASE
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2019-3795
Insufficient Entropy in PRNG Spring Security containa an insecure randomness vulnerability when using `SecureRandomFactoryBean#setSeed` to configure a `SecureRandom` instance. In …