CVE:CVE-2016-5007
CNNVD:CNNVD-201607-323
Pivotal Spring Security和Spring Framework都是美国Pivotal Software公司的产品。前者是一套为基于Spring的应用程序提供说明性安全保护的安全框架，后者是一套开源的Java、Java EE应用程序框架。
Pivotal Spring Security和Spring Framework中存在安全漏洞。攻击者可利用该漏洞绕过安全限制，执行未授权操作。以下版本受到影响：Pivotal Spring Security 3.2.x版本，4.0.x版本，4.1.x版本，4.2.x版本；Spring Security 3.2.x版本，4.0.x版本，4.1.0版本。
solution:Upgrade pivotal_software spring_framework to a higher version than 3.2.0,4.0.0,4.1.0,4.2.0,and avoid the version 3.2.0,4.0.0,4.1.0,4.2.0; Upgrade vmware spring_framework to a higher version than 3.2.1,3.2.2,3.2.3,3.2.4,3.2.5,3.2.6,3.2.7,3.2.8,3.2.9,3.2.10,3.2.11,3.2.12,3.2.13,3.2.14,3.2.15,3.2.16,3.2.17,3.2.18,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.1.1,4.1.2,4.1.3,4.1.4,4.1.5,4.1.6,4.1.7,4.1.8,4.1.9,4.2.1,4.2.2,4.2.3,4.2.4,4.2.5,4.2.6,4.2.7,4.2.8,4.2.9,and avoid the version 3.2.1,3.2.2,3.2.3,3.2.4,3.2.5,3.2.6,3.2.7,3.2.8,3.2.9,3.2.10,3.2.11,3.2.12,3.2.13,3.2.14,3.2.15,3.2.16,3.2.17,3.2.18,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,4.0.8,4.0.9,4.1.1,4.1.2,4.1.3,4.1.4,4.1.5,4.1.6,4.1.7,4.1.8,4.1.9,4.2.1,4.2.2,4.2.3,4.2.4,4.2.5,4.2.6,4.2.7,4.2.8,4.2.9; Upgrade vmware spring_security to a higher version than 3.2.0,3.2.1,3.2.2,3.2.3,3.2.4,3.2.5,3.2.6,3.2.7,3.2.8,3.2.9,3.2.10,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.1.0,and avoid the version 3.2.0,3.2.1,3.2.2,3.2.3,3.2.4,3.2.5,3.2.6,3.2.7,3.2.8,3.2.9,3.2.10,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.1.0