This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] VMware fixes 2 vulnerabilities in Spring Security and Spring Framework

VMware fixes 2 high-severity vulnerabilities in Spring Security and Spring Framework. Products and their fixes: Spring Security - 6.2.3, 6.1.8, 6.0.10, 5.8.11, 5.7.12 Spring Framework - 6.1.5, 6.0.18, 5.3.33

VMware Spring Security - Broken Access Control (CVE-2024-22257)
CVSS 8.2 (High)

An unauthenticated remote attacker can break access control in Spring Security if the "AuthenticatedVoter#vote" component is used directly with a null "Authentication" parameter [1].

The vulnerability is present in product:

  • Spring Security; <5.7.12; >=5.8.0, <5.8.11; >=6.0.0, <6.1.8; >=6.2.0, <6.2.3

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

More information:

The vulnerability was publicly disclosed 18. 3. 2024.

VMware Spring Framework - SSRF (CVE-2024-22259)
CVSS 8.1 (High)

An unauthenticated remote attacker can carry out open redirect or server-side request forgery (SSRF) attacks in Spring Framework [2].

The vulnerability is present in product:

  • Spring Framework; >=6.1.0, < 6.1.5; >=6.0.0, <6.0.18; <5.3.33

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

More information:

The vulnerability was publicly disclosed 15. 3. 2024.

By CESNET, z.s.p.o. Michaela Jarošová on 19. 3. 2024.

CESNET, z.s.p.o. Logo