{"id":"CVE-2020-5408","published":"2020-05-14T17:15:13Z","modified":"2024-09-17T01:01:47Z","title":"Dictionary attack with Spring Security queryable text encryptor","vendor":"Spring by VMware","product":"Spring Security","tier":"tail","description":{"text":"Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector with CBC Mode in the implementation of the queryable text encryptor. A malicious user with access to the data that has been encrypted using such an encryptor may be able to derive the unencrypted values using a dictionary attack.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01594,"percentile":0.75624,"provenance":"source"},"cwes":[{"id":"CWE-329","name":"Generation of Predictable IV with CBC Mode"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC"]},{"url":"https://tanzu.vmware.com/security/cve-2020-5408","tags":["x_refsource_CONFIRM"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC"]}],"priority":{"score":15.1,"factors":[{"name":"EPSS percentile","points":15.12}]},"vendorSlug":"spring-by-vmware","affectedVersions":[{"vendor":"Spring by VMware","product":"Spring Security","versions":[">= 4.2, < 4.2.16",">= 5.0, < 5.0.16",">= 5.1, < 5.1.10",">= 5.2, < 5.2.4",">= 5.3, < 5.3.2"]}],"affected":[{"ecosystem":"Maven","package":"org.springframework.security:spring-security-core","vulnerableRanges":[">=5.3.0, <5.3.2",">=5.2.0, <5.2.4",">=5.1.0, <5.1.10",">=5.0.0, <5.0.16","<4.2.16"],"patched":["5.3.2","5.2.4","5.1.10","5.0.16","4.2.16"],"from":["GHSA-2ppp-9496-p23q"],"provenance":"source"}],"euvd":{"id":"EUVD-2020-0449","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2019-11272","published":"2019-06-26","fixed":"4.2.13","kev":false,"link":{"from":"CVE-2019-11272","to":"CVE-2020-5408","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.springframework.security:spring-security-core","fromFixed":"4.2.13","toFixed":"4.2.16","daysApart":323}]}},{"cve":"CVE-2018-15801","published":"2018-12-19","fixed":"5.1.2","kev":false},{"cve":"CVE-2019-3795","published":"2019-04-09","fixed":"5.1.5","kev":false,"link":{"from":"CVE-2019-3795","to":"CVE-2020-5408","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.springframework.security:spring-security-core","fromFixed":"5.1.5","toFixed":"5.1.10","daysApart":401}]}},{"cve":"CVE-2020-5407","published":"2020-05-13","fixed":"5.3.2","kev":false},{"cve":"CVE-2020-5408","published":"2020-05-14","fixed":"5.3.2","kev":false},{"cve":"CVE-2021-22119","published":"2021-06-29","fixed":"5.5.1","kev":false,"link":{"from":"CVE-2020-5408","to":"CVE-2021-22119","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.springframework.security:spring-security-core","fromFixed":"5.3.2","toFixed":"5.3.10","daysApart":411}]}},{"cve":"CVE-2022-22976","published":"2022-05-19","fixed":"5.6.4","kev":false},{"cve":"CVE-2022-22978","published":"2022-05-19","fixed":"5.6.4","kev":false}],"package":"Maven:org.springframework.security:spring-security-core"}}