Description
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a regular expression, denial of service attack.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- oracle / agile_product_lifecycle_management9.3.4 – 9.3.4
- oracle / agile_product_lifecycle_management9.3.5 – 9.3.5
- oracle / agile_product_lifecycle_management9.3.6 – 9.3.6
- oracle / agile_product_lifecycle_management9.3.3 – 9.3.3
- oracle / Application Testing Suite13.1.0.1 – 13.1.0.1
- oracle / Application Testing Suite13.3.0.1 – 13.3.0.1
- oracle / Application Testing Suite13.2.0.1 – 13.2.0.1
- oracle / Application Testing Suite12.5.0.3 – 12.5.0.3
- oracle / big_data_discovery1.6.0 – 1.6.0
- oracle / communications_converged_application_server7.0.0.1
- oracle / communications_diameter_signaling_router8.3
- oracle / communications_performance_intelligence_center10.2.1
- oracle / communications_services_gatekeeper6.1.0.4.0
- oracle / communications_unified_inventory_management7.3.5 – 7.3.5
- oracle / communications_unified_inventory_management7.3.4 – 7.3.4
- oracle / communications_unified_inventory_management7.4.0 – 7.4.0
- oracle / communications_unified_inventory_management7.3.2 – 7.3.2
- oracle / endeca_information_discovery_integrator3.1.0 – 3.1.0
- oracle / endeca_information_discovery_integrator3.2.0 – 3.2.0
- oracle / enterprise_manager_base_platform13.2.0.0.0 – 13.2.0.0.0
- oracle / enterprise_manager_base_platform12.1.0.5.0 – 12.1.0.5.0
- oracle / enterprise_manager_base_platform13.3.0.0.0 – 13.3.0.0.0
- oracle / enterprise_manager_for_mysql_database13.2 – 13.2
- oracle / enterprise_manager_ops_center12.3.3 – 12.3.3
- oracle / FLEXCUBE Private Banking2.2.0.1 – 2.2.0.1
- oracle / FLEXCUBE Private Banking12.1.0.0 – 12.1.0.0
- oracle / FLEXCUBE Private Banking12.0.3.0 – 12.0.3.0
- oracle / FLEXCUBE Private Banking2.0.0.0 – 2.0.0.0
- oracle / FLEXCUBE Private Banking12.0.1.0 – 12.0.1.0
- oracle / goldengate_for_big_data12.3.1.1 – 12.3.1.1
- oracle / goldengate_for_big_data12.2.0.1 – 12.2.0.1
- oracle / goldengate_for_big_data12.3.2.1 – 12.3.2.1
- oracle / healthcare_master_person_index3.0 – 3.0
- oracle / healthcare_master_person_index4.0 – 4.0
- oracle / health_sciences_information_manager3.0 – 3.0
- oracle / hospitality_guest_access4.2.0 – 4.2.0
- oracle / hospitality_guest_access4.2.1 – 4.2.1
- oracle / insurance_calculation_engine10.1.1 – 10.1.1
- oracle / insurance_calculation_engine10.2.1 – 10.2.1
- oracle / insurance_calculation_engine10.2 – 10.2
- oracle / insurance_rules_palette11.1 – 11.1
- oracle / insurance_rules_palette10.1 – 10.1
- oracle / insurance_rules_palette10.2 – 10.2
- oracle / insurance_rules_palette11.0 – 11.0
- oracle / insurance_rules_palette10.0 – 10.0
- oracle / primavera_gateway16.2 – 16.2
- oracle / primavera_gateway17.12 – 17.12
- oracle / primavera_gateway15.2 – 15.2
- oracle / retail_customer_insights16.0 – 16.0
- oracle / retail_customer_insights15.0 – 15.0
- oracle / retail_open_commerce_platform6.0.0 – 6.0.0
- oracle / retail_open_commerce_platform5.3.0 – 5.3.0
- oracle / retail_open_commerce_platform6.0.1 – 6.0.1
- oracle / retail_order_broker5.1 – 5.1
- oracle / retail_order_broker15.0 – 15.0
- oracle / retail_order_broker16.0 – 16.0
- oracle / retail_order_broker5.2 – 5.2
- oracle / retail_predictive_application_server14.0 – 14.0
- oracle / retail_predictive_application_server16.0 – 16.0
- oracle / retail_predictive_application_server15.0 – 15.0
- oracle / retail_predictive_application_server14.1 – 14.1
- oracle / service_architecture_leveraging_tuxedo12.1.3.0.0 – 12.1.3.0.0
- oracle / service_architecture_leveraging_tuxedo12.2.2.0.0 – 12.2.2.0.0
- oracle / tape_library_acsls8.4 – 8.4
- oracle / utilities_network_management_system1.12.0.3 – 1.12.0.3
- oracle / weblogic_server12.2.1.3.0 – 12.2.1.3.0
- oracle / weblogic_server10.3.6.0.0 – 10.3.6.0.0
- oracle / weblogic_server12.1.3.0.0 – 12.1.3.0.0
- Pivotal / Spring Framework5.0.x prior to 5.0.6; 4.3.x prior to 4.3.17 – 5.0.x prior to 5.0.6; 4.3.x prior to 4.3.17
- RedHat / openshift
- VMware / Spring Framework4.3.17
References
- MISChttp://www.securityfocus.com/bid/104260
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2018:1809
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2018:3768
- VENDOR_ADVISORYhttp://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpujul2020.html
- VENDOR_ADVISORYhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- VENDOR_ADVISORYhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- VENDOR_ADVISORYhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpujan2020.html
- MISChttps://pivotal.io/security/cve-2018-1257
- VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpuoct2021.html
Updated 24m ago · 8 sources