CVE-2020-5412

Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can send a request to other servers that should not be exposed publicly.

CVSS v3 6.5 MEDIUM
CVSS v2.0 4.0 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://tanzu.vmware.com/security/cve-2020-5412	Vendor Advisory
https://tanzu.vmware.com/security/cve-2020-5412	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:vmware:spring_cloud_netflix::::::::
	cpe:2.3:a:vmware:spring_cloud_netflix::::::::

History

21 Nov 2024, 05:34

Type	Values Removed	Values Added
References	~~() https://tanzu.vmware.com/security/cve-2020-5412 - Vendor Advisory~~	() https://tanzu.vmware.com/security/cve-2020-5412 - Vendor Advisory

Information

Published : 2020-08-07 21:15

Updated : 2024-11-21 05:34

NVD link : CVE-2020-5412

Mitre link : CVE-2020-5412

CVE.ORG link : CVE-2020-5412

JSON object : View

Products Affected

vmware

spring_cloud_netflix

CWE

CWE-441

Unintended Proxy or Intermediary ('Confused Deputy')

CWE-610

Externally Controlled Reference to a Resource in Another Sphere

{"id": "CVE-2020-5412", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2020-08-07T21:15:10.630", "references": [{"url": "https://tanzu.vmware.com/security/cve-2020-5412", "tags": ["Vendor Advisory"], "source": "security@pivotal.io"}, {"url": "https://tanzu.vmware.com/security/cve-2020-5412", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@pivotal.io", "description": [{"lang": "en", "value": "CWE-441"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-610"}]}], "descriptions": [{"lang": "en", "value": "Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can send a request to other servers that should not be exposed publicly."}, {"lang": "es", "value": "Spring Cloud Netflix, versiones 2.2.x anteriores a 2.2.4, versiones 2.1.x anteriores a 2.1.6 y versiones anteriores no compatibles, permiten a las aplicaciones utilizar el endpoint proxy.stream de Hystrix Dashboard para hacer peticiones a cualquier servidor accesible por parte del servidor de que aloja el panel de control. Un usuario malicioso, o atacante, puede enviar una petici\u00f3n hacia otros servidores que no deber\u00edan estar expuestos p\u00fablicamente"}], "lastModified": "2024-11-21T05:34:07.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:spring_cloud_netflix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A76819D2-D093-40E7-9B74-73F70BC437C7", "versionEndExcluding": "2.1.6"}, {"criteria": "cpe:2.3:a:vmware:spring_cloud_netflix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A0CF260-1B03-4976-887A-D04BF1D6E7F1", "versionEndExcluding": "2.2.4", "versionStartIncluding": "2.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@pivotal.io"}