CVE-2018-1196 – org.springframework.boot:spring-boot

Package

Manager: maven
Name: org.springframework.boot:spring-boot
Vulnerable Version: >=1.5.0 <1.5.10

Severity

Level: Medium

CVSS v3.1: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v4.0: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS: 0.00604 pctl0.68636

Details

Moderate severity vulnerability that affects org.springframework.boot:spring-boot Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "run_user" to overwrite and take ownership of any file on the same system. In order to instigate the attack, the application must be installed as a service and the "run_user" requires shell access to the server. Spring Boot application that are not installed as a service, or are not using the embedded launch script are not susceptible.

Metadata

Created: 2018-10-18T18:05:57Z
Modified: 2021-09-22T18:26:44Z
Source: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-xx65-cc7g-9pfp/GHSA-xx65-cc7g-9pfp.json
CWE IDs: ["CWE-59"]
Alternative ID: GHSA-xx65-cc7g-9pfp
Finding: F076
Auto approve: 1