PT-2014-3110 · Pivotal · Spring Framework

Publicado 2014-01-26 · Atualizado 2022-05-13 · CVE-2013-6429

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pivotal software spring framework (affected versions not specified) vmware spring framework (affected versions not specified)

Description The issue concerns a problem in pivotal software spring framework and vmware spring framework.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

CSRF

XXE

Enumeração de Fraquezas

CWE-352

CWE-611

Identificadores relacionados

CVE-2013-6429

DSA-2857-1

GHSA-G6HF-F9CQ-Q7W7

MGASA-2014-0096

Produtos afetados

Spring Framework

Referências · 24

• https://github.com/spring-projects/spring-framework/commit/2ae6a6a3415eebc57babcb9d3e5505887eda6d8 · Nota
• https://github.com/spring-projects/spring-framework/issues/15704 · Nota
• https://github.com/spring-projects/spring-framework/commit/7387cb990e35b0f1b573faf29d4f9ae183d7a5e · Nota
• https://ubuntu.com/security/CVE-2013-6429 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-6429 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-g6hf-f9cq-q7w7 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2014-0400.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-6429 · Aviso do Fabricante
• http://securityfocus.com/archive/1/530770/100/0/threaded · Nota
• https://jira.springsource.org/browse/SPR-11078?page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel · Aviso do Fabricante
• http://gopivotal.com/security/cve-2013-6429 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-6429 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2013-6429 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6429 · Nota
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755 · Nota