Skip to main content

Improper Validation of Certificate with Host Mismatch

CVE-2026-22747

High
8.1/10

Summary

Vulnerability in Spring Spring Security.SubjectX500PrincipalExtractordoes not correctly handle certain malformed X.509 certificateCNvalues, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0-M1 through 7.0.4.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • LOW
  • HIGH
  • NONE

CWE-297 - Improper Validation of Certificate with Host Mismatch

The software communicates with a host that provides a certificate, but the software does not properly ensure that the certificate is actually associated with that host.

References

Advisory Timeline

  • Published