CVE:CVE-2018-1199
CNNVD:CNNVD-201803-641
Pivotal Spring Security和Spring Framework都是美国Pivotal Software公司的产品。Pivotal Spring Security是一套为基于Spring的应用程序提供说明性安全保护的安全框架。Spring Framework是一套开源的Java、Java EE应用程序框架。
Pivotal Spring Security和Spring Framework中存在安全漏洞。攻击者可利用该漏洞绕过安全限制。以下产品和版本受到影响：Spring Security 4.1.5之前的4.1.x版本，4.2.4之前的4.2.x版本，5.0.1之前的5.0.x版本；Spring Framework 4.3.14之前的4.3.x版本，5.0.3之前的5.0.x版本。
solution:Upgrade vmware spring_framework to a higher version than 4.3.14,5.0.3,and avoid the version [4.3.0,4.3.14),[5.0.0,5.0.3); Upgrade vmware spring_security to a higher version than 4.1.5,4.2.4,5.0.1,and avoid the version [4.1.0,4.1.5),[4.2.0,4.2.4),[5.0.0,5.0.1); Upgrade redhat fuse to a higher version than 1.0,and avoid the version 1.0; Upgrade oracle rapid_planning to a higher version than 12.1,12.2,and avoid the version 12.1,12.2; Upgrade oracle retail_xstore_point_of_service to a higher version than 7.1,and avoid the version 7.1