CVE-2018-1196 Moderate severity vulnerability that affects org.springframework.boot:spring-boot
MediumCVSS 5.9
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "run_user" to overwrite and take ownership of any file on the same system. In order to instigate the attack, the application must be installed as a service and the "run_user" requires shell access to the server. Spring Boot application that are not installed as a service, or are not using the embedded launch script are not susceptible.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.springframework.boot/spring-boot(Maven) | >= 1.5.0, < 1.5.10 | 1.5.10 |
| org.springframework.boot/spring-boot(Maven) | = 1.5.0.RELEASE | No fix listed |
| org.springframework.boot/spring-boot(Maven) | = 1.5.1.RELEASE | No fix listed |
| org.springframework.boot/spring-boot(Maven) | = 1.5.2.RELEASE | No fix listed |
| org.springframework.boot/spring-boot(Maven) | = 1.5.3.RELEASE | No fix listed |
| org.springframework.boot/spring-boot(Maven) | = 1.5.4.RELEASE | No fix listed |
| org.springframework.boot/spring-boot(Maven) | = 1.5.5.RELEASE | No fix listed |
| org.springframework.boot/spring-boot(Maven) | = 1.5.6.RELEASE | No fix listed |
| org.springframework.boot/spring-boot(Maven) | = 1.5.7.RELEASE | No fix listed |
| org.springframework.boot/spring-boot(Maven) | = 1.5.8.RELEASE | No fix listed |
| org.springframework.boot/spring-boot(Maven) | = 1.5.9.RELEASE | No fix listed |
| VMware spring boot | <= 1.5.9 | No fix listed |
| VMware spring boot | = 2.0.0-milestone1 | No fix listed |
| VMware spring boot | = 2.0.0-milestone2 | No fix listed |
| VMware spring boot | = 2.0.0-milestone3 | No fix listed |
| VMware spring boot | = 2.0.0-milestone4 | No fix listed |
| VMware spring boot | = 2.0.0-milestone5 | No fix listed |
| VMware spring boot | = 2.0.0-milestone6 | No fix listed |
| VMware spring boot | = 2.0.0-milestone7 | No fix listed |
| Dell EMC Spring Boot | = 1.5.0 - 1.5.9 | No fix listed |
| Dell EMC Spring Boot | = 2.0.0.M1 - 2.0.0.M7 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com vendor-advisory
- pivotal.io vendor-advisory