5.4Mittel
CVE-2026-40995X.509 authentication bypasses Spring Security account checks
Beschreibung
X509AuthenticationProvider could issue a fully authenticated X509AuthenticationToken when a presented certificate mapped to UserDetails, without applying Spring Security's standard account lifecycle checks (disabled, locked, expired, or credentials-expired accounts). Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.
Schwachstellentyp (CWE):
CWE-287
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| broadcom | spring web services | < 3.1.9 | |
| Spring | Spring Web Services | 5.0.0 – < 5.0.1.1, 4.1.0 – < 4.1.3.1, 4.0.0 – < 4.0.19, 3.1.0 – < 3.1.9 |
Referenzen und Patches
- https://spring.io/security/cve-2026-40995 Vendor Advisory
CPE-Treffer (NVD) (4)
cpe:2.3:a:broadcom:spring_web_services:*:*:*:*:*:*:*:*< 3.1.9cpe:2.3:a:broadcom:spring_web_services:*:*:*:*:*:*:*:*≥ 4.0.0 < 4.0.19cpe:2.3:a:broadcom:spring_web_services:*:*:*:*:*:*:*:*≥ 4.1.0 < 4.1.3.1cpe:2.3:a:broadcom:spring_web_services:*:*:*:*:*:*:*:*≥ 5.0.0 < 5.0.1.1