Veille CVE
CVE-2022-22965
9.8 Critique Exploitée activementCatalogue CISA KEV — Spring Framework JDK 9+ Remote Code Execution Vulnerability
Ajoutée le 04/04/2022 · Échéance de correction (agences US) : 25/04/2022
Action requise : Apply updates per vendor instructions.
Description
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
Produits concernés
- Spring Framework
- Vmware spring framework
- Cisco cx cloud agent
- Oracle communications cloud native core automated test suite
- Oracle communications cloud native core console
- Oracle communications cloud native core network exposure function
- Oracle communications cloud native core network function cloud native environment
- Oracle communications cloud native core network repository function
- Oracle communications cloud native core network slice selection function
- Oracle communications cloud native core policy
- Oracle communications cloud native core security edge protection proxy
- Oracle communications cloud native core unified data repository
- Oracle communications policy management
- Oracle financial services analytical applications infrastructure
- Oracle financial services behavior detection platform
- Oracle financial services enterprise case management
- Oracle mysql enterprise monitor
- Oracle product lifecycle analytics
- Oracle retail xstore point of service
- Oracle sd-wan edge
- Siemens operation scheduler
- Siemens sipass integrated
- Siemens siveillance identity
- Veritas access appliance
- Veritas flex appliance
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 9.8 Critique | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 7.5 Élevée | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Faiblesses (CWE)
Références
- http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html Third Party AdvisoryVDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf PatchThird Party Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005 Third Party Advisory
- https://tanzu.vmware.com/security/cve-2022-22965 MitigationVendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67 Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
- http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html Third Party AdvisoryVDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf PatchThird Party Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005 Third Party Advisory
- https://tanzu.vmware.com/security/cve-2022-22965 MitigationVendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67 Third Party Advisory
- https://www.kb.cert.org/vuls/id/970766 US Government Resource
- https://www.oracle.com/security-alerts/cpuapr2022.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965 US Government Resource