Access control flaw in Pivotal Spring Security
Priority LOW 38CWE-264Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Partial Red Hat: 4 without a fix
Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-264.
Summary
Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space trimming in path segments, can lead Spring Security to not recognize certain paths as not protected that are in fact mapped to Spring MVC controllers that should be protected. The problem is compounded by the fact that the Spring Framework provides richer features with regards to pattern matching as well as by the fact that pattern matching in each Spring Security and the Spring Framework can easily be customized creating additional differences.
Why it matters now
EPSS 0.02802 86th percentileScored 2026-11-07
Fix Partial org.springframework:spring-core (Maven): 4.3.1org.springframework.security:spring-security-core (Maven): 4.1.1Red Hat: 4 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Pivotal | Spring Security | 3.2.x; 4.0.x; 4.1.0 | — | No fix listed | CNA |
| Pivotal | Spring Framework | 3.2.x; 4.0.x; 4.1.x; 4.2.x; older unsupported versions are also affected | — | No fix listed | CNA |
| — | org.springframework:spring-core (Maven) | before 4.3.1 | 4.3.1 | Patch available | GHSA-8crv-49fr-2h6j |
| — | org.springframework.security:spring-security-core (Maven) | before 4.1.1 | 4.1.1 | Patch available | GHSA-8crv-49fr-2h6j |
- Spring Security VendorPivotal Affected 3.2.x; 4.0.x; 4.1.0 Fixed in — No fix listed CNA
- Spring Framework VendorPivotal Affected 3.2.x; 4.0.x; 4.1.x; 4.2.x; older unsupported versions are also affected Fixed in — No fix listed CNA
- org.springframework:spring-core (Maven) Vendor— Affected before 4.3.1 Fixed in 4.3.1 Patch available GHSA-8crv-49fr-2h6j
- org.springframework.security:spring-security-core (Maven) Vendor— Affected before 4.1.1 Fixed in 4.1.1 Patch available GHSA-8crv-49fr-2h6j
CPE configurations NVD · 66
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:pivotal_software:spring_framework:3.2.0:*:*:*:*:*:*:* | 3.2.0 | Vulnerable | Spring by Pivotal |
| cpe:2.3:a:pivotal_software:spring_framework:4.0.0:*:*:*:*:*:*:* | 4.0.0 | Vulnerable | Spring by Pivotal |
| cpe:2.3:a:pivotal_software:spring_framework:4.1.0:*:*:*:*:*:*:* | 4.1.0 | Vulnerable | Spring by Pivotal |
| cpe:2.3:a:pivotal_software:spring_framework:4.2.0:*:*:*:*:*:*:* | 4.2.0 | Vulnerable | Spring by Pivotal |
| cpe:2.3:a:vmware:spring_framework:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.2:*:*:*:*:*:*:* | 3.2.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.3:*:*:*:*:*:*:* | 3.2.3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.4:*:*:*:*:*:*:* | 3.2.4 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.5:*:*:*:*:*:*:* | 3.2.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.6:*:*:*:*:*:*:* | 3.2.6 | Vulnerable | VMware |
- cpe:2.3:a:pivotal_software:spring_framework:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·Spring by Pivotal
- cpe:2.3:a:pivotal_software:spring_framework:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Spring by Pivotal
- cpe:2.3:a:pivotal_software:spring_framework:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Spring by Pivotal
- cpe:2.3:a:pivotal_software:spring_framework:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·Spring by Pivotal
- cpe:2.3:a:vmware:spring_framework:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Vulnerable ·VMware
Show 56 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vmware:spring_framework:3.2.7:*:*:*:*:*:*:* | 3.2.7 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.8:*:*:*:*:*:*:* | 3.2.8 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.9:*:*:*:*:*:*:* | 3.2.9 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.10:*:*:*:*:*:*:* | 3.2.10 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.11:*:*:*:*:*:*:* | 3.2.11 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.12:*:*:*:*:*:*:* | 3.2.12 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.13:*:*:*:*:*:*:* | 3.2.13 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.14:*:*:*:*:*:*:* | 3.2.14 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.15:*:*:*:*:*:*:* | 3.2.15 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.16:*:*:*:*:*:*:* | 3.2.16 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.17:*:*:*:*:*:*:* | 3.2.17 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:3.2.18:*:*:*:*:*:*:* | 3.2.18 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.0.3:*:*:*:*:*:*:* | 4.0.3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.0.4:*:*:*:*:*:*:* | 4.0.4 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.0.5:*:*:*:*:*:*:* | 4.0.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.0.6:*:*:*:*:*:*:* | 4.0.6 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.0.7:*:*:*:*:*:*:* | 4.0.7 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.0.8:*:*:*:*:*:*:* | 4.0.8 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.0.9:*:*:*:*:*:*:* | 4.0.9 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.1.1:*:*:*:*:*:*:* | 4.1.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.1.2:*:*:*:*:*:*:* | 4.1.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.1.3:*:*:*:*:*:*:* | 4.1.3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.1.4:*:*:*:*:*:*:* | 4.1.4 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.1.5:*:*:*:*:*:*:* | 4.1.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.1.6:*:*:*:*:*:*:* | 4.1.6 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.1.7:*:*:*:*:*:*:* | 4.1.7 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.1.8:*:*:*:*:*:*:* | 4.1.8 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.1.9:*:*:*:*:*:*:* | 4.1.9 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.2.1:*:*:*:*:*:*:* | 4.2.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.2.2:*:*:*:*:*:*:* | 4.2.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.2.3:*:*:*:*:*:*:* | 4.2.3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.2.4:*:*:*:*:*:*:* | 4.2.4 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.2.5:*:*:*:*:*:*:* | 4.2.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.2.6:*:*:*:*:*:*:* | 4.2.6 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.2.7:*:*:*:*:*:*:* | 4.2.7 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.2.8:*:*:*:*:*:*:* | 4.2.8 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_framework:4.2.9:*:*:*:*:*:*:* | 4.2.9 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.0:*:*:*:*:*:*:* | 3.2.0 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.2:*:*:*:*:*:*:* | 3.2.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.3:*:*:*:*:*:*:* | 3.2.3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.4:*:*:*:*:*:*:* | 3.2.4 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.5:*:*:*:*:*:*:* | 3.2.5 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.6:*:*:*:*:*:*:* | 3.2.6 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.7:*:*:*:*:*:*:* | 3.2.7 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.8:*:*:*:*:*:*:* | 3.2.8 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.9:*:*:*:*:*:*:* | 3.2.9 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:3.2.10:*:*:*:*:*:*:* | 3.2.10 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:4.0.0:*:*:*:*:*:*:* | 4.0.0 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:4.0.3:*:*:*:*:*:*:* | 4.0.3 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:4.0.4:*:*:*:*:*:*:* | 4.0.4 | Vulnerable | VMware |
| cpe:2.3:a:vmware:spring_security:4.1.0:*:*:*:*:*:*:* | 4.1.0 | Vulnerable | VMware |
- cpe:2.3:a:vmware:spring_framework:3.2.7:*:*:*:*:*:*:* Versions 3.2.7 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.8:*:*:*:*:*:*:* Versions 3.2.8 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.9:*:*:*:*:*:*:* Versions 3.2.9 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.10:*:*:*:*:*:*:* Versions 3.2.10 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.11:*:*:*:*:*:*:* Versions 3.2.11 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.12:*:*:*:*:*:*:* Versions 3.2.12 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.13:*:*:*:*:*:*:* Versions 3.2.13 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.14:*:*:*:*:*:*:* Versions 3.2.14 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.15:*:*:*:*:*:*:* Versions 3.2.15 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.16:*:*:*:*:*:*:* Versions 3.2.16 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.17:*:*:*:*:*:*:* Versions 3.2.17 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:3.2.18:*:*:*:*:*:*:* Versions 3.2.18 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.0.6:*:*:*:*:*:*:* Versions 4.0.6 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.0.8:*:*:*:*:*:*:* Versions 4.0.8 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.0.9:*:*:*:*:*:*:* Versions 4.0.9 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.1.2:*:*:*:*:*:*:* Versions 4.1.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.1.3:*:*:*:*:*:*:* Versions 4.1.3 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.1.4:*:*:*:*:*:*:* Versions 4.1.4 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.1.5:*:*:*:*:*:*:* Versions 4.1.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.1.6:*:*:*:*:*:*:* Versions 4.1.6 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.1.7:*:*:*:*:*:*:* Versions 4.1.7 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.1.8:*:*:*:*:*:*:* Versions 4.1.8 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.1.9:*:*:*:*:*:*:* Versions 4.1.9 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.2.2:*:*:*:*:*:*:* Versions 4.2.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.2.3:*:*:*:*:*:*:* Versions 4.2.3 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.2.4:*:*:*:*:*:*:* Versions 4.2.4 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.2.5:*:*:*:*:*:*:* Versions 4.2.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.2.6:*:*:*:*:*:*:* Versions 4.2.6 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.2.7:*:*:*:*:*:*:* Versions 4.2.7 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.2.8:*:*:*:*:*:*:* Versions 4.2.8 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_framework:4.2.9:*:*:*:*:*:*:* Versions 4.2.9 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.7:*:*:*:*:*:*:* Versions 3.2.7 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.8:*:*:*:*:*:*:* Versions 3.2.8 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.9:*:*:*:*:*:*:* Versions 3.2.9 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:3.2.10:*:*:*:*:*:*:* Versions 3.2.10 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·VMware
- cpe:2.3:a:vmware:spring_security:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·VMware
Remediation
- Fix · GHSA-8crv-49fr-2h6j org.springframework:spring-core (Maven) Fixed in 4.3.1 Advisory →
- Fix · GHSA-8crv-49fr-2h6j org.springframework.security:spring-security-core (Maven) Fixed in 4.1.1 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Virtualization 3 | Affected | — |
| Red Hat JBoss A-MQ 6 | Affected | No fix yet |
| Red Hat JBoss Fuse 6 | Affected | No fix yet |
| Red Hat OpenShift Enterprise 2 | Affected | — |
Timeline
- 2026-10-02 Threatist record created from CVE-2016-5007
- 2026-10-03 Alias added: GHSA-8crv-49fr-2h6j
References
Advisory 3
Other 5
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://github.com/spring-projects/spring-security/issues/3964
- https://github.com/spring-projects/spring-framework/commit/a30ab30e4e9ae021fdda04e9abfc228476b846b5
- https://github.com/spring-projects/spring-security/commit/e4c13e3c0ee7f06f59d3b43ca6734215ad7d8974
More Pivotal vulnerabilities
- TI-2017-05637 Improper input validation in Pivotal Spring Data REST and Spring Boot CVSS 3.0CRITICAL 9.8
- TI-2016-04299 When processing authorization requests using the whitelabel views in Spring Security… CVSS 3.0HIGH 8.8
- TI-2018-01165 Code injection in Pivotal Spring Security OAuth CVSS 3.0CRITICAL 9.8
- TI-2018-11237 DoS Attack via Range Requests CVSS 3.1HIGH 7.5
- TI-2019-02791 Apps Manager unverified SSL certs in Cloud Controller proxy CVSS 3.0CRITICAL 9.8
- TI-2018-11239 On Demand Services SDK Timing Attack Vulnerability CVSS 3.0CRITICAL 9.8
Sources
- CVE-2016-5007 · CVE Program
- CVE-2016-5007 · NVD
- FIRST EPSS
- GHSA-8crv-49fr-2h6j · GitHub Advisory Database · CC BY 4.0
- CVE-2016-5007 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences