Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-1275

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.

Published

2018-04-11T13:29:00.353

Last Modified

2024-11-21T03:59:31.333

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-94
  • Type: Secondary
    CWE-358
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application vmware spring_framework < 4.3.16 Yes
Application vmware spring_framework < 5.0.5 Yes
Application oracle application_testing_suite 12.5.0.3 Yes
Application oracle application_testing_suite 13.1.0.1 Yes
Application oracle application_testing_suite 13.2.0.1 Yes
Application oracle application_testing_suite 13.3.0.1 Yes
Application oracle big_data_discovery 1.6.0 Yes
Application oracle communications_converged_application_server < 7.0.0.1 Yes
Application oracle communications_diameter_signaling_router < 8.3 Yes
Application oracle communications_performance_intelligence_center < 10.2.1 Yes
Application oracle communications_services_gatekeeper < 6.1.0.4.0 Yes
Application oracle goldengate_for_big_data 12.2.0.1 Yes
Application oracle goldengate_for_big_data 12.3.1.1 Yes
Application oracle goldengate_for_big_data 12.3.2.1 Yes
Application oracle health_sciences_information_manager 3.0 Yes
Application oracle healthcare_master_person_index 3.0 Yes
Application oracle healthcare_master_person_index 4.0 Yes
Application oracle insurance_calculation_engine 10.1.1 Yes
Application oracle insurance_calculation_engine 10.2 Yes
Application oracle insurance_calculation_engine 10.2.1 Yes
Application oracle insurance_rules_palette 10.0 Yes
Application oracle insurance_rules_palette 10.1 Yes
Application oracle insurance_rules_palette 10.2 Yes
Application oracle insurance_rules_palette 11.0 Yes
Application oracle insurance_rules_palette 11.1 Yes
Application oracle primavera_gateway 15.2 Yes
Application oracle primavera_gateway 16.2 Yes
Application oracle primavera_gateway 17.12 Yes
Application oracle retail_customer_insights 15.0 Yes
Application oracle retail_customer_insights 16.0 Yes
Application oracle retail_open_commerce_platform 5.3.0 Yes
Application oracle retail_open_commerce_platform 6.0.0 Yes
Application oracle retail_open_commerce_platform 6.0.1 Yes
Application oracle retail_order_broker 5.1 Yes
Application oracle retail_order_broker 5.2 Yes
Application oracle retail_order_broker 15.0 Yes
Application oracle retail_order_broker 16.0 Yes
Application oracle retail_predictive_application_server 14.0 Yes
Application oracle retail_predictive_application_server 14.1 Yes
Application oracle retail_predictive_application_server 15.0 Yes
Application oracle retail_predictive_application_server 16.0 Yes
Application oracle service_architecture_leveraging_tuxedo 12.1.3.0.0 Yes
Application oracle service_architecture_leveraging_tuxedo 12.2.2.0.0 Yes
Application oracle tape_library_acsls 8.4 Yes
References