Pivotal Software

NewsSecurity Vulnerabilities

Spring Security PlaintextPasswordEncoder Authentication Vulnerability [CVE-2019-11272]

CVE Number – CVE-2019-11272 A vulnerability in Pivotal Software Spring Security could allow a local attacker to bypass authorization restrictions

Read More
NewsSecurity Vulnerabilities

Pivotal Spring Security OAuth Open Redirector Attack Information Disclosure Vulnerability [CVE-2019-11269]

CVE Number – CVE-2019-11269 A vulnerability in Pivotal Spring Security OAuth could allow an unauthenticated, remote attacker to conduct an

Read More
NewsSecurity Vulnerabilities

Pivotal Software Spring Cloud Config spring-cloud-config-server Module Directory Traversal Vulnerability [CVE-2019-3799]

CVE Number – CVE-2019-3799 A vulnerability in Spring Cloud Config could allow an unauthenticated, remote attacker to conduct a directory

Read More
NewsSecurity Vulnerabilities

Pivotal Software Spring Framework STOMP Broker Arbitrary Code Execution Vulnerability [CVE-2018-1275]

CVE Number – CVE-2018-1275 A vulnerability in the spring-messaging module in Spring Framework could allow an unauthenticated, remote attacker to

Read More
NewsSecurity Vulnerabilities

Pivotal Software Spring Security OAuth Authorization Request Remote Code Execution Vulnerability [CVE-2018-1260]

CVE Number – CVE-2018-1260 A vulnerability in Pivotal Software Spring Security OAuth could allow an unauthenticated, remote attacker to execute

Read More
Security Vulnerabilities

Pivotal Software Spring Framework Spring Security Method Authorization Bypass Vulnerability [CVE-2018-1258]

A vulnerability in the Spring Framework used in combination with Spring Security could allow an unauthenticated, remote attacker to bypass

Read More