CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-06-02
Spring Cloud Config Server Directory Traversal Arbitrary File Read Vulnerability (CVE-2020-5410) Analysis and Mitigation Guide
[Affected Scope] Spring Cloud Config Server versions 2.2.x prior to 2.2.3, and 2.1.x prior to 2.1.9
[Impact] Unauthenticated remote attackers can exploit a directory traversal vulnerability to read arbitrary configuration and system files from the server
[Mitigation] Immediately upgrade Spring Cloud Config Server to version 2.2.3, 2.1.9, or higher, and restrict network access