PT-2022-27781 · Unknown · Spring-Boot-Admin

Tim-Conrad · Published 2022-12-09 · Updated 2022-12-13 · CVE-2022-46166

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Spring Boot Admin versions prior to 2.6.10 Spring Boot Admin versions prior to 2.7.8

Description The issue affects users who run Spring Boot Admin Server with enabled Notifiers and write access to environment variables via UI. This allows for arbitrary code execution. Users are advised to upgrade to the most recent releases to resolve the issue.

Recommendations For versions prior to 2.6.10, upgrade to version 2.6.10 or later. For versions prior to 2.7.8, upgrade to version 2.7.8 or later. As a temporary workaround, consider disabling any notifier. Restrict access to the /env actuator endpoint by disabling write access (POST request) until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-46166

GHSA-W3X5-427H-WFQ6

Affected Products

Spring-Boot-Admin

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/46xxx/CVE-2022-46166.json · Exploit
• https://github.com/codecentric/spring-boot-admin/commit/c14c3ec12533f71f84de9ce3ce5ceb7991975f75 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-46166 · Security Note
• https://osv.dev/vulnerability/CVE-2022-46166 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w3x5-427h-wfq6 · Vendor Advisory
• https://github.com/codecentric/spring-boot-admin · Note
• https://github.com/codecentric/spring-boot-admin/security/advisories/GHSA-w3x5-427h-wfq6 · Note
• https://t.me/pentestingnews/31088 · Telegram Post
• https://t.me/cvenotify/39567 · Telegram Post
• https://t.me/cibsecurity/54251 · Telegram Post