CVE-2010-3700

N/A Unknown
Published: October 29, 2010 Modified: April 29, 2026
View on NVD

Description

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://osvdb.org/68931
Source: secalert@redhat.com
http://secunia.com/advisories/42024
Source: secalert@redhat.com
http://www.securityfocus.com/archive/1/514517/100/0/threaded
Source: secalert@redhat.com
http://www.securityfocus.com/bid/44496
Source: secalert@redhat.com
http://www.springsource.com/security/cve-2010-3700
Source: secalert@redhat.com
https://issues.apache.org/bugzilla/show_bug.cgi?id=25015
Source: secalert@redhat.com
http://osvdb.org/68931
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/42024
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/514517/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/44496
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.springsource.com/security/cve-2010-3700
Source: af854a3a-2127-422b-91ae-364da2661108
https://issues.apache.org/bugzilla/show_bug.cgi?id=25015
Source: af854a3a-2127-422b-91ae-364da2661108

12 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.7%
74th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-264

Affected Vendors

acegisecurity vmware ibm

Related CVEs

CVE-2026-57700 10.0
CVE-2026-56790 7.3
CVE-2026-56789 6.5
CVE-2026-56788 4.4
CVE-2026-56787 6.5