CVE-2011-2731 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.1 UNKNOWN	NETWORK	HIGH		AV:N/AC:H/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 52%

Affected Products (NVD)

Vendor	Product	Version
vmware	springsource_spring_security	𝑥 ≤ 2.0.6
vmware	springsource_spring_security	𝑥 ≤ 3.0.5
vmware	springsource_spring_security	2.0.0
vmware	springsource_spring_security	2.0.1
vmware	springsource_spring_security	2.0.2
vmware	springsource_spring_security	2.0.3
vmware	springsource_spring_security	2.0.4
vmware	springsource_spring_security	2.0.5
vmware	springsource_spring_security	3.0.0
vmware	springsource_spring_security	3.0.1
vmware	springsource_spring_security	3.0.2
vmware	springsource_spring_security	3.0.3
vmware	springsource_spring_security	3.0.4

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

libspring-security-2.0-java

hardy	dne
lucid	dne
oneiric	ignored
precise	ignored
quantal	not-affected
raring	not-affected
saucy	not-affected
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	dne
yakkety	dne
zesty	dne

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814

http://secunia.com/advisories/55155

http://support.springsource.com/security/cve-2011-2731

http://www.securitytracker.com/id/1029151

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677814

http://secunia.com/advisories/55155

http://support.springsource.com/security/cve-2011-2731

http://www.securitytracker.com/id/1029151