PT-2019-6210 · Spring · Spring Cloud Config

Published 2019-05-06 · Updated 2022-06-13 · CVE-2019-3799

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Spring Cloud Config versions 1.4.x prior to 1.4.6 Spring Cloud Config versions 2.0.x prior to 2.0.4 Spring Cloud Config versions 2.1.x prior to 2.1.2

Description The issue exists due to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow a remote attacker to disclose protected information using a specially crafted URL, potentially leading to a directory traversal attack.

Recommendations For versions 1.4.x prior to 1.4.6, update to version 1.4.6 or later. For versions 2.0.x prior to 2.0.4, update to version 2.0.4 or later. For versions 2.1.x prior to 2.1.2, update to version 2.1.2 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2022-02830

CVE-2019-3799

GHSA-4X49-W62V-76Q7

Affected Products

Spring Cloud Config

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/springcloud_traversal.rb · Exploit
• 🔥 https://github.com/mpgn/CVE-2019-3799 · Exploit
• 🔥 https://exploit-db.com/exploits/46772 · Exploit
• https://bdu.fstec.ru/vul/2022-02830 · Security Note
• https://oracle.com/security-alerts/cpuapr2022.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-3799 · Security Note
• https://pivotal.io/security/cve-2019-3799 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-3799 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4x49-w62v-76q7 · Vendor Advisory
• https://tanzu.vmware.com/security/cve-2019-3799 · Note