CVE

Id
46284  
CVE No.
CVE-2010-3700  
Status
Candidate  
Description
VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.  
Phase
Assigned (20101001)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
504582 46284 CVE-2010-3700 BUGTRAQ:20101027 CVE-2010-3700: Spring Security bypass of security constraints  View
504583 46284 CVE-2010-3700 URL:http://www.securityfocus.com/archive/1/archive/1/514517/100/0/threaded  View
504584 46284 CVE-2010-3700 MISC:https://issues.apache.org/bugzilla/show_bug.cgi?id=25015  View
504585 46284 CVE-2010-3700 CONFIRM:http://www.springsource.com/security/cve-2010-3700  View
504586 46284 CVE-2010-3700 BID:44496  View
504587 46284 CVE-2010-3700 URL:http://www.securityfocus.com/bid/44496  View
504588 46284 CVE-2010-3700 OSVDB:68931  View
504589 46284 CVE-2010-3700 URL:http://osvdb.org/68931  View
504590 46284 CVE-2010-3700 SECUNIA:42024  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36692 JVNDB-2010-002472 xpdf および poppler などの製品で利用される PDF パーサの FoFiType1::parse 関数における任意のコードを実行される脆弱性 xpdf および poppler などの製品で利用される PDF パーサの fofi/FoFiType1.cc 内にある FoFiType1::parse 関数には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-3704 46284 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002472.html  View