A vulnerability classified as problematic has been found in Vmware Spring Security up to 7.0.4. Affected by this issue is some unknown functionality of the component DaoAuthenticationProvider. This manipulation of the argument UserDetails causes information disclosure.
This vulnerability is tracked as CVE-2026-22746. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
