The vulnerability in Spring Security affects the SubjectX500PrincipalExtractor's handling of malformed X.509 certificate Common Name (CN) values. Due to improper parsing, the component may extract an incorrect username, enabling an attacker to impersonate another user if they present a specially crafted certificate. This issue impacts Spring Security versions from 7.0.0 through 7.0.4. The CVSS 3.1 base score is 6.8, reflecting network attack vector, high complexity, low privileges required, no user interaction, and high confidentiality and integrity impact but no availability impact. No official patch or remediation guidance is currently available from the vendor.

An attacker who can present a carefully crafted X.509 certificate may be able to impersonate another user by exploiting the incorrect username extraction. This can lead to unauthorized access and compromise of user identity within applications relying on the affected Spring Security versions. The vulnerability affects confidentiality and integrity but does not impact availability. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider additional validation of certificate CN values or implement compensating controls to verify user identity beyond certificate parsing. Monitor vendor channels for updates and apply patches promptly once available.