CVE-2011-2731 | BDVDB-2026-53743 Detail

Description#

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://support.springsource.com/security/cve-2011-2731
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814
http://secunia.com/advisories/55155
http://www.securitytracker.com/id/1029151

Exploit#

No public exploit known

History#

Version 12012-12-05Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.