PT-2020-18461 · Spring · Spring Cloud Config

Yiming Xiang · Published 2020-03-05 · Updated 2020-06-05 · CVE-2020-5405

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Spring Cloud Config versions 2.2.x prior to 2.2.2 Spring Cloud Config versions 2.1.x prior to 2.1.7 Spring Cloud Config older unsupported versions

Description The issue allows applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack.

Recommendations For Spring Cloud Config versions 2.2.x prior to 2.2.2, update to version 2.2.2 or later. For Spring Cloud Config versions 2.1.x prior to 2.1.7, update to version 2.1.7 or later. For Spring Cloud Config older unsupported versions, consider upgrading to a supported version to mitigate the risk.

Fix

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

CVE-2020-5405

GHSA-G86W-V5VG-9GXF

Affected Products

Spring Cloud Config

References · 6

• https://pivotal.io/security/cve-2020-5405 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5405 · Security Note
• https://osv.dev/vulnerability/GHSA-g86w-v5vg-9gxf · Vendor Advisory
• https://github.com/spring-cloud/spring-cloud-config/spring-cloud-config-server · Note
• https://t.me/cvenotify/1395 · Telegram Post