SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. Affected versions: Spring Security 5.7.0 through 5.7.24; 5.8.0 through 5.8.26; 6.3.0 through 6.3.17; 6.4.0 through 6.4.17; 6.5.0 through 6.5.10.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values,
    which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can
    lead to an attacker impersonating another user. Affected versions: Spring Security 5.7.0 through 5.7.24;
    5.8.0 through 5.8.26; 6.3.0 through 6.3.17; 6.4.0 through 6.4.17; 6.5.0 through 6.5.10. (CVE-2026-47838)

The version of Atlassian Jira Service Management Data Center and Server (Jira Service Desk) running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16652 advisory.

  - This High severity BASM (Broken Authentication & Session Management) vulnerability was introduced in versions     10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service     Management Data Center, allowing an authenticated attacker to perform actions as another user.     (CVE-2026-47838)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
460499	Echo: org.springframework.security:spring-security-web: security update to 6.5.11	Tenable Cloud Security	Echo Local Security Checks	Local	high
460499	Echo: org.springframework.security:spring-security-web: security update to 6.5.11	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
330091	Atlassian Jira Service Management Data Center and Server 10.0.x / 10.1.1 / 10.2.x / 10.3.x < 10.3.7 / 10.4.x / 10.5.x / 10.6.x / 11.x < 11.3.8 (JSDSERVER-16652)	Nessus	Misc.	Local	high
444191	SCA: security update for org.springframework.security:spring-security-web (GHSA-293q-567p-wmwq)	Tenable Cloud Security	SCA Checks	Local	high
444191	SCA: security update for org.springframework.security:spring-security-web (GHSA-293q-567p-wmwq)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-47838

high

Tenable Plugins

high

high

high

high

high