Home > Vulnerability Database > CVE-2010-3700

Mend Vulnerability Database

CVE-2010-3700

Good to know:

Date: October 29, 2010

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

Language: Java

Severity Score

5.0

Related Resources (5)

Url: http://www.securityfocus.com/bid/44496

Url: http://www.springsource.com/security/cve-2010-3700

Url: http://www.securityfocus.com/archive/1/514517/100/0/threaded

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-3700

Url: https://www.mend.io/vulnerability-database/CVE-2010-3700

Severity Score

5.0

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

Top Fix

Upgrade Version

Upgrade to version 2.0.6,3.0.4

Learn More

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend Vulnerability Database

We found results for “”

CVE-2010-3700

Good to know:

Date: October 29, 2010

Language: Java

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?