Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-47838

Unauthorized User Impersonation when Using X.509 Client Certificates

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. Affected versions: Spring Security 5.7.0 through 5.7.24; 5.8.0 through 5.8.26; 6.3.0 through 6.3.17; 6.4.0 through 6.4.17; 6.5.0 through 6.5.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Spring Spring Security

Default version status: unaffected

  • 5.7.0 to < 5.7.25affected
  • 5.8.0 to < 5.8.27affected
  • 6.3.0 to < 6.3.18affected
  • 6.4.0 to < 6.4.18affected
  • 6.5.0 to < 6.5.10.2affected

References