PT-2012-1569
CVE-2011-2732
·
تاريخ النشر
2012-12-05
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
VMware SpringSource Spring Security versions prior to 2.0.7
VMware SpringSource Spring Security versions 3.0.x prior to 3.0.6
Description
The issue concerns a CRLF injection vulnerability in the logout functionality. This allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the
spring-security-redirect parameter.Recommendations
For versions prior to 2.0.7, update to version 2.0.7 or later.
For versions 3.0.x prior to 3.0.6, update to version 3.0.6 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾