CVE-2010-3700: Acegisecurity Acegi-Security

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

Affected products

• Acegisecurity Acegi-Security: version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …
• IBM WebSphere Application Server: version 6.1 only; version 7.0 only
• VMware Springsource Spring Security: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 2010-10-29. Last modified 2026-06-16.