Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-cas@4.2.0.RELEASE
purl pkg:maven/org.springframework.security/spring-security-cas@4.2.0.RELEASE
Next non-vulnerable version 4.2.13.RELEASE
Latest non-vulnerable version 5.3.4.RELEASE
Risk score 3.3
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-v33x-prhc-gph5
Aliases:
CVE-2019-11272
Insufficiently Protected Credentials and Improper Authentication in Spring Security Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions …
4.2.13.RELEASE
Not vulnerable
CVE-2019-11272

Improper Authentication Spring Security support plain text passwords using `PlaintextPasswordEncoder`. a malicious user (or attacker) can authenticate using a password …
4.2.13.RELEASE
Not vulnerable
CVE-2019-3795

Insufficient Entropy in PRNG Spring Security containa an insecure randomness vulnerability when using `SecureRandomFactoryBean#setSeed` to configure a `SecureRandom` instance. In …
5.0.12.RELEASE
Not vulnerable
5.1.5.RELEASE
Not vulnerable
4.2.12.RELEASE
Vulnerable
This package is not known to fix any advisories.