CVE-2014-3527
Last modified
CVE-2014-3527 is a vulnerability of currently unknown severity. When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication uses the information from the HttpServletRequest which is populated based upon untrusted information within the HTTP request. EPSS estimates a 1.81% chance of exploitation in the next 30 days.
Description
When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication uses the information from the HttpServletRequest which is populated based upon untrusted information within the HTTP request. This means if there are access control restrictions on which CAS services can authenticate to one another, those restrictions can be bypassed. If users are not using CAS Proxy tickets and not basing access control decisions based upon the CAS Service, then there is no impact to users.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Spring Security | 3.1.0 |
| Vmware | Spring Security | 3.1.1 |
| Vmware | Spring Security | 3.1.2 |
| Vmware | Spring Security | 3.1.3 |
| Vmware | Spring Security | 3.1.4 |
| Vmware | Spring Security | 3.2.0 |
| Vmware | Spring Security | 3.2.1 |
| Vmware | Spring Security | 3.2.2 |
| Vmware | Spring Security | 3.2.3 |
| Vmware | Spring Security | 3.2.4 |
References
- https://pivotal.io/security/cve-2014-3527Vendor Advisory
- https://pivotal.io/security/cve-2014-3527Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-3527?
How severe is CVE-2014-3527?
How do I fix CVE-2014-3527?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-3521The component in (1) /luci/homebase and (2) /luci/cluster me…
- CVE-2014-3522The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x b…
- CVE-2014-3523Memory leak in the winnt_accept function in server/mpm/winnt…
- CVE-2014-3524Apache OpenOffice before 4.1.1 allows remote attackers to ex…
- CVE-2014-3525Unspecified vulnerability in Apache Traffic Server 3.x throu…
- CVE-2014-3526Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x befo…7.5
- CVE-2014-3528Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.…
- CVE-2014-3529The OPC SAX setup in Apache POI before 3.10.1 allows remote …
- CVE-2014-3530The org.picketlink.common.util.DocumentUtil.getDocumentBuild…
- CVE-2014-3531Multiple cross-site scripting (XSS) vulnerabilities in Forem…
- CVE-2014-3532dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when runnin…
- CVE-2014-3533dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local…
Are you affected by CVE-2014-3527?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST