Path traversal in Spring Cloud Config - CVE-2019-3799
Published: May 10, 2019 / Updated: June 17, 2021
Vulnerability identifier: #VU18426
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-3799
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists because the spring-cloud-config-server module of the affected software allows applications to serve static resources from a file system. A remote attacker can send a specially crafted HTTP request and read, overwrite or delete arbitrary files on the system.
Affected software
Spring Cloud Config
Oracle Communications Cloud Native Core Policy
Oracle Communications Cloud Native Core Policy
How to mitigate CVE-2019-3799
Install updates from vendor's website.
Spring Cloud Config - update to 2.1.2