Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-1272

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and then uses that input to make a multipart request to another server (server B), it can be exposed to an attack, where an extra multipart is inserted in the content of the request from server A, causing server B to use the wrong value for a part it expects. This could to lead privilege escalation, for example, if the part content represents a username or user roles.

Published

2018-04-06T13:29:00.563

Last Modified

2024-11-21T03:59:30.877

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application vmware spring_framework < 4.3.15 Yes
Application vmware spring_framework < 5.0.5 Yes
Application oracle application_testing_suite 12.5.0.3 Yes
Application oracle application_testing_suite 13.1.0.1 Yes
Application oracle application_testing_suite 13.2.0.1 Yes
Application oracle application_testing_suite 13.3.0.1 Yes
Application oracle big_data_discovery 1.6.0 Yes
Application oracle communications_converged_application_server < 7.0.0.1 Yes
Application oracle communications_diameter_signaling_router < 8.3 Yes
Application oracle communications_performance_intelligence_center < 10.2.1 Yes
Application oracle communications_services_gatekeeper < 6.1.0.4.0 Yes
Application oracle enterprise_manager_ops_center 12.2.2 Yes
Application oracle enterprise_manager_ops_center 12.3.3 Yes
Application oracle goldengate_for_big_data 12.2.0.1 Yes
Application oracle goldengate_for_big_data 12.3.1.1 Yes
Application oracle goldengate_for_big_data 12.3.2.1 Yes
Application oracle health_sciences_information_manager 3.0 Yes
Application oracle healthcare_master_person_index 3.0 Yes
Application oracle healthcare_master_person_index 4.0 Yes
Application oracle insurance_calculation_engine 10.1.1 Yes
Application oracle insurance_calculation_engine 10.2 Yes
Application oracle insurance_calculation_engine 10.2.1 Yes
Application oracle insurance_rules_palette 10.0 Yes
Application oracle insurance_rules_palette 10.1 Yes
Application oracle insurance_rules_palette 10.2 Yes
Application oracle insurance_rules_palette 11.0 Yes
Application oracle insurance_rules_palette 11.1 Yes
Application oracle primavera_gateway 15.2 Yes
Application oracle primavera_gateway 16.2 Yes
Application oracle primavera_gateway 17.12 Yes
Application oracle retail_back_office 14.0 Yes
Application oracle retail_back_office 14.1 Yes
Application oracle retail_central_office 14.0 Yes
Application oracle retail_central_office 14.1 Yes
Application oracle retail_customer_insights 15.0 Yes
Application oracle retail_customer_insights 16.0 Yes
Application oracle retail_integration_bus 14.0.1 Yes
Application oracle retail_integration_bus 14.0.2 Yes
Application oracle retail_integration_bus 14.0.3 Yes
Application oracle retail_integration_bus 14.0.4 Yes
Application oracle retail_integration_bus 14.1.1 Yes
Application oracle retail_integration_bus 14.1.2 Yes
Application oracle retail_integration_bus 14.1.3 Yes
Application oracle retail_integration_bus 15.0.0.1 Yes
Application oracle retail_integration_bus 15.0.1 Yes
Application oracle retail_integration_bus 15.0.2 Yes
Application oracle retail_integration_bus 16.0 Yes
Application oracle retail_integration_bus 16.0.1 Yes
Application oracle retail_integration_bus 16.0.2 Yes
Application oracle retail_open_commerce_platform 5.3.0 Yes
Application oracle retail_open_commerce_platform 6.0.0 Yes
Application oracle retail_open_commerce_platform 6.0.1 Yes
Application oracle retail_order_broker 5.1 Yes
Application oracle retail_order_broker 5.2 Yes
Application oracle retail_order_broker 15.0 Yes
Application oracle retail_order_broker 16.0 Yes
Application oracle retail_point-of-sale 14.0 Yes
Application oracle retail_point-of-sale 14.1 Yes
Application oracle retail_predictive_application_server 14.0 Yes
Application oracle retail_predictive_application_server 14.1 Yes
Application oracle retail_predictive_application_server 15.0 Yes
Application oracle retail_predictive_application_server 16.0 Yes
Application oracle retail_returns_management 14.0 Yes
Application oracle retail_returns_management 14.1 Yes
Application oracle service_architecture_leveraging_tuxedo 12.1.3.0.0 Yes
Application oracle service_architecture_leveraging_tuxedo 12.2.2.0.0 Yes
Application oracle tape_library_acsls 8.4 Yes
References