MEDIUM6.8

GHSA-2jrg-rf5x-568g

Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

Quick fix

GHSA-2jrg-rf5x-568g — org.springframework.security:spring-security-web: upgrade to the fixed version with the command below.

# pom.xml: bump <version>7.0.5</version> for org.springframework.security:spring-security-web

Details

Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0 through 7.0.4.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven/org.springframework.security:spring-security-web

Introduced in: 7.0.0Fixed in: 7.0.5

Fix# pom.xml: bump <version>7.0.5</version> for org.springframework.security:spring-security-web

Details

Are you affected?

Affected packages

References