CVE-2010-3700

Description

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

References

https://issues.apache.org/bugzilla/show_bug.cgi?id=25015

http://www.springsource.com/security/cve-2010-3700

http://www.securityfocus.com/bid/44496

http://www.securityfocus.com/archive/1/514517/100/0/threaded

http://secunia.com/advisories/42024

http://osvdb.org/68931

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS