CVE-2010-3700 | BDVDB-2026-43869 Detail

Description#

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/44496
http://secunia.com/advisories/42024
https://issues.apache.org/bugzilla/show_bug.cgi?id=25015
http://www.springsource.com/security/cve-2010-3700
http://osvdb.org/68931
http://www.securityfocus.com/archive/1/514517/100/0/threaded

Exploit#

No public exploit known

History#

Version 12010-10-29Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.