WID-SEC-W-2023-1802

DeutschShown in its original language — a full translation is planned for a future version.

VMware Tanzu Spring Security: Schwachstelle ermöglicht nicht spezifizierten Angriff

view advisory published 2023-07-18

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Security ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-34035US	medium5.3OT elevated	0.66% (51st)	Exploit	2023-07-18
Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfiguration if the application uses requestM…

references

External citations — patches, advisories, analysis.

Spring Security Advisories vom 2023-07-18external
WID-SEC-W-2023-1802 - CSAF Versionself
WID-SEC-2023-1802 - Portal Versionself
Dell Security Advisory DSA-2025-258 vom 2025-06-30external
IBM Security Bulletin 7070753 vom 2023-11-29external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan