VIR Vulnerability Intelligence Relay

CVE-2012-5055

medium
Published 2012-12-05 · Modified 2024-12-07
CVSS v3
—
CVSS v2
5.0
VIR risk
5.0

Description

Exposure of Sensitive Information to an Unauthorized Actor in Spring Security

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://support.springsource.com/security/CVE-2012-5055

Package impact
EcosystemPackageVulnerableFixed
java Mavenorg.springframework.security:spring-security-core<2.0.82.0.8
java Mavenorg.springframework.security:spring-security-core>=3.0.0,<3.0.83.0.8
java Mavenorg.springframework.security:spring-security-core>=3.1.0,<3.1.33.1.3

Application impact
VendorProductVersionsFixed
vmware vmwarespringsource_spring_security{"endIncluding":"2.0.6"}
vmware vmwarespringsource_spring_security2.0.0
vmware vmwarespringsource_spring_security2.0.1
vmware vmwarespringsource_spring_security2.0.2
vmware vmwarespringsource_spring_security2.0.3
vmware vmwarespringsource_spring_security2.0.4
vmware vmwarespringsource_spring_security2.0.5
vmware vmwarespringsource_spring_security3.0.0
vmware vmwarespringsource_spring_security3.0.1
vmware vmwarespringsource_spring_security3.0.2
vmware vmwarespringsource_spring_security3.0.3
vmware vmwarespringsource_spring_security3.0.4
vmware vmwarespringsource_spring_security3.0.5
vmware vmwarespringsource_spring_security3.1.1
vmware vmwarespringsource_spring_security3.1.2

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.