Closed
Description
The method is deprecated as a result of issue: CVE-2020-5408. The solution was to deprecate this method. This does not satisfy code analyzers such as Fortify as it could potentially still be used.
I would suggest this method be removed as should not be used anyway.
Method in question:
org.springframework.security.crypto.encrypt#queryableText(CharSequence password, CharSequence salt)