[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZvT0VsvekiZLr0f4Q182YYbxafNlUSwPM8eJKo0m-4k":3,"g5a-risk:CVE-2021-22112":211},{"success":4,"data":5,"meta":209},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":38,"references":80,"referencesCount":134,"weaknesses":135,"weaknessesCount":139,"isActivelyExploited":140,"cisaInfo":26,"otxData":26,"relatedBlogPosts":141,"seoMetadata":142,"configurations":167,"relatedVendorCves":207,"notableEvents":208},"CVE-2021-22112","What is CVE-2021-22112?","Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application's intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.","Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the Securit...","2021-02-23T19:15:13.573","2023-11-07T03:30:09.163",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C","SINGLE","COMPLETE",9,8,10,0.03286,[39,39,39,39,39,39,39],"High",[43,48,51,55,59,62,66,70,74,77],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"pivotal_software","spring_security","*","cpe:2.3:a:pivotal_software:spring_security:*:*:*:*:*:*:*:*",{"vendor":49,"product":45,"version":46,"criteria":50,"vulnerable":4},"vmware","cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":46,"criteria":54,"vulnerable":4},"oracle","communications_element_manager","cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*",{"vendor":52,"product":56,"version":57,"criteria":58,"vulnerable":4},"communications_interactive_session_recorder","6.3","cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:*",{"vendor":52,"product":56,"version":60,"criteria":61,"vulnerable":4},"6.4","cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*",{"vendor":52,"product":63,"version":64,"criteria":65,"vulnerable":4},"communications_unified_inventory_management","7.4.1","cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",{"vendor":52,"product":67,"version":68,"criteria":69,"vulnerable":4},"hospitality_cruise_shipboard_property_management_system","20.1.0","cpe:2.3:a:oracle:hospitality_cruise_shipboard_property_management_system:20.1.0:*:*:*:*:*:*:*",{"vendor":52,"product":71,"version":72,"criteria":73,"vulnerable":4},"insurance_policy_administration","11.2.0","cpe:2.3:a:oracle:insurance_policy_administration:11.2.0:*:*:*:*:*:*:*",{"vendor":52,"product":71,"version":75,"criteria":76,"vulnerable":4},"11.3.0","cpe:2.3:a:oracle:insurance_policy_administration:11.3.0:*:*:*:*:*:*:*",{"vendor":52,"product":78,"version":46,"criteria":79,"vulnerable":4},"mysql_enterprise_monitor","cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",[81,87,91,94,97,100,103,106,109,112,115,118,123,127,131],{"url":82,"source":83,"tags":84},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2021\u002F02\u002F19\u002F7","Openwall",[85,86],"Mailing List","Third Party Advisory",{"url":88,"source":89,"tags":90},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr163b3e4e39803882f5be05ee8606b2b9812920e196daa2a82997ce14%40%3Cpluto-dev.portals.apache.org%3E","Apache",[],{"url":92,"source":89,"tags":93},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr2cb05e499807900ba23e539643eead9c5f0652fd271f223f89da1804%40%3Cpluto-scm.portals.apache.org%3E",[],{"url":95,"source":89,"tags":96},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr37423ec7eea340e92a409452c35b649dce02fdc467f0b3f52086c177%40%3Cpluto-dev.portals.apache.org%3E",[],{"url":98,"source":89,"tags":99},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr3868207b967f926819fe3aa8d33f1666429be589bb4a62104a49f4e3%40%3Cpluto-dev.portals.apache.org%3E",[],{"url":101,"source":89,"tags":102},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr390783b3b1c59b978131ac08390bf77fbb3863270cbde59d5b0f5fde%40%3Cpluto-dev.portals.apache.org%3E",[],{"url":104,"source":89,"tags":105},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr413e380088c427f56102968df89ef2f336473e1b56b7d4b3a571a378%40%3Cpluto-dev.portals.apache.org%3E",[],{"url":107,"source":89,"tags":108},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr89aa1b48a827f5641310305214547f1d6b2101971a49b624737c497f%40%3Cpluto-dev.portals.apache.org%3E",[],{"url":110,"source":89,"tags":111},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra53677224fe4f04c2599abc88032076faa18dc84b329cdeba85d4cfc%40%3Cpluto-scm.portals.apache.org%3E",[],{"url":113,"source":89,"tags":114},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra6389b1b82108a3b6bbcd22979f7665fd437c2a3408c9509a15a9ca1%40%3Cpluto-dev.portals.apache.org%3E",[],{"url":116,"source":89,"tags":117},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fredbd004a503b3520ae5746c2ab5e93fd7da807a8c128e60d2002cd9b%40%3Cissues.nifi.apache.org%3E",[],{"url":119,"source":120,"tags":121},"https:\u002F\u002Ftanzu.vmware.com\u002Fsecurity\u002Fcve-2021-22112","Vmware",[122],"Vendor Advisory",{"url":124,"source":125,"tags":126},"https:\u002F\u002Fwww.oracle.com\u002F\u002Fsecurity-alerts\u002Fcpujul2021.html","Oracle",[86],{"url":128,"source":125,"tags":129},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002FcpuApr2021.html",[130,86],"Patch",{"url":132,"source":125,"tags":133},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2021.html",[130,86],15,[136],{"id":137,"name":137,"description":138},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":143,"metaDescription":144,"keywords":145,"canonicalUrl":146,"structuredData":147},"What is CVE-2021-22112? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-22112, a high severity cyber security vulnerability from 2021. Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8....","CVE-2021-22112, CVE-2021-22112 vulnerability, CVE-2021-22112 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, pivotal_software security, vmware security, oracle security, spring_security vulnerability, communications_element_manager vulnerability, communications_interactive_session_recorder vulnerability, communications_unified_inventory_management vulnerability, hospitality_cruise_shipboard_property_management_system vulnerability","\u002Fwhat-is\u002Fcve-2021-22112",{"@context":148,"@type":149,"headline":143,"description":144,"datePublished":10,"dateModified":11,"author":150,"publisher":154,"about":158,"mainEntityOfPage":162,"articleSection":165,"keywords":166},"https:\u002F\u002Fschema.org","TechArticle",{"@type":151,"name":152,"url":153},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":151,"name":152,"url":153,"logo":155},{"@type":156,"url":157},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":159,"name":6,"description":160,"additionalType":161},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":163,"@id":164},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-22112","Cybersecurity","CVE-2021-22112, CVE-2021-22112 vulnerability, CVE-2021-22112 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[168,184],{"Operator":26,"Negate":26,"Nodes":169},[170],{"Operator":171,"Negate":26,"CPEMatch":172},"OR",[173,176,180],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":174,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":175,"VersionEndIncluding":26},"3AD0B286-87BD-4042-B14D-CCEBA35063FF","5.2.9",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":177,"VersionStartExcluding":26,"VersionStartIncluding":178,"VersionEndExcluding":179,"VersionEndIncluding":26},"6B466D0D-7C51-4442-AABA-6C131A9E95E8","5.3.0","5.3.8",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":181,"VersionStartExcluding":26,"VersionStartIncluding":182,"VersionEndExcluding":183,"VersionEndIncluding":26},"80052391-7A7E-4101-99FF-8A345518377A","5.4.0","5.4.4",{"Operator":26,"Negate":26,"Nodes":185},[186],{"Operator":171,"Negate":26,"CPEMatch":187},[188,192,194,196,198,200,202,204],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":190,"VersionEndExcluding":26,"VersionEndIncluding":191},"0331877D-D5DB-4EE8-8220-C1CDC3F90CB0","8.2.0","8.2.4.0",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":193,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"46E23F2E-6733-45AF-9BD9-1A600BD278C8",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E812639B-EE28-4C68-9F6F-70C8BF981C86",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":197,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A7637F8B-15F1-42E2-BE18-E1FF7C66587D",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"05F5B430-8BA1-4865-93B5-0DE89F424B53",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7138F2C-EBD9-4685-9113-F5ECE9FCA90E",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EF958C28-4289-4433-8CD9-B6551F01926F",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":206},"88627B99-16DC-4878-A63A-A40F6FC1F477","8.0.25",[],[],{"lastModified":11,"cacheTime":210,"version":32},1792248198619,{"score":212,"band":213,"action":214,"scoredAt":215},45,"Medium","Plan remediation","2026-10-16T06:50:31.272758+00:00"]