Spring Security vulnerable to Authorization Bypass
Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same private key for an honest issuer and a malicious user must be used when signing JWTs. In that case, a malicious user could fashion signed JWTs with the malicious issuer URL that may be granted for the honest issuer.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-15801US | high7.4OT elevated | — | ||
Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same private key for an hones… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/advisories/GHSA-27xw-p8v6-9jjrADVISORY
- https://github.com/spring-projects/spring-securityPACKAGE
- https://github.com/spring-projects/spring-security/commit/c70b65c5df0e170a2d34d812b83db0b7bc71ea25WEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-15801ADVISORY
- https://pivotal.io/security/cve-2018-15801WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan