Medium severity · published May 6, 2019
CVE-2019-3799
Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve…
6.5
CVSS
85.3%
EPSS
No
On KEV
Description
Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)85.3% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Communications Cloud Native Core Policy · Oracle
1.15.0 · source: NVD
SC
Spring Cloud Config · Vmware
1.4.0 before 1.4.6; 2.0.0 before 2.0.4; 2.1.0 before 2.1.2 · source: NVD
Affected product
CC
Communications Cloud Native Core Policy
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-3799
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-3799
Vendor Advisory
https://pivotal.io/security/cve-2019-3799
Patch
https://www.oracle.com/security-alerts/cpuapr2022.html
More from Communications Cloud Native Core Policy
9.8
CVE-2022-22965
Spring Framework JDK 9+ Remote Code Execution Vulnerability
9.8
CVE-2022-22963
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
8.5
CVE-2021-39144
XStream is vulnerable to a Remote Command Execution attack
9.8
CVE-2021-3773
A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks
9.8
CVE-2021-42392
The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database