CVE-2018-15801
Authorization Bypass During JWT Issuer Validation with spring-security
- State
- Published
- Severity
- 3.3 Low
- Published
- Dec 19, 2018
- Updated
- Sep 16, 2024
- Reserved
- Aug 23, 2018
Description
Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same private key for an honest issuer and a malicious user must be used when signing JWTs. In that case, a malicious user could fashion signed JWTs with the malicious issuer URL that may be granted for the honest issuer.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 3.3 Low | CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N | dell |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Spring SecuritySpring by Pivotal |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.