CVE-2010-3700

Published: Oct 29, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

Affected (20)

Products: Acegisecurity: Acegi Security · Vmware: Springsource Spring Security · Ibm: Websphere Application Server

Acegisecurity

1 product

Acegi Security

Vmware

1 product

Springsource Spring Security

Ibm

1 product

Websphere Application Server

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Acegisecurity Acegi Security	Version 1.0.0
Acegisecurity Acegi Security	Version 1.0.1
Acegisecurity Acegi Security	Version 1.0.2
Acegisecurity Acegi Security	Version 1.0.3
Acegisecurity Acegi Security	Version 1.0.4
Acegisecurity Acegi Security	Version 1.0.5
Acegisecurity Acegi Security	Version 1.0.6
Acegisecurity Acegi Security	Version 1.0.7
Vmware Springsource Spring Security	Version 2.0.0
Vmware Springsource Spring Security	Version 2.0.1
Vmware Springsource Spring Security	Version 2.0.2
Vmware Springsource Spring Security	Version 2.0.3
Vmware Springsource Spring Security	Version 2.0.4
Vmware Springsource Spring Security	Version 2.0.5
Vmware Springsource Spring Security	Version 3.0.0
Vmware Springsource Spring Security	Version 3.0.1
Vmware Springsource Spring Security	Version 3.0.2
Vmware Springsource Spring Security	Version 3.0.3
Ibm Websphere Application Server	Version 6.1
Ibm Websphere Application Server	Version 7.0