← CVE Intelligence

CVE-2026-47838

Unauthorized User Impersonation when Using X.509 Client Certificates PUBLISHED

Description (CNA)

SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. Affected versions: Spring Security 5.7.0 through 5.7.24; 5.8.0 through 5.8.26; 6.3.0 through 6.3.17; 6.4.0 through 6.4.17; 6.5.0 through 6.5.10.

Affected (CNA)

Vendor / productVersions
Spring / Spring Securityaffected 5.7.0 before 5.7.25; affected 5.8.0 before 5.8.27; affected 6.3.0 before 6.3.18; affected 6.4.0 before 6.4.18; affected 6.5.0 before 6.5.10.2

CWE

CWE-287

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.