Improper Authorization

Summary

The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions in all versions prior to 6.2.11, and 7.0.x prior to 7.0.0-M9. Your application may be affected by this if you are using Spring Security's "@EnableMethodSecurityfeature". You are not affected by this if you are not using "@EnableMethodSecurity" or if you do not use security annotations on methods in generic super classes or generic interfaces.