Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-3799
HistoryMay 06, 2019 - 4:29 p.m.

CVE-2019-3799

2019-05-0616:29:01
CWE-22
[email protected]
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

High

EPSS

0.026

Percentile

90.3%

JSON

Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.

Affected configurations

Nvd
Node
vmwarespring_cloud_configRange1.4.0–1.4.6
OR
vmwarespring_cloud_configRange2.0.0–2.0.4
OR
vmwarespring_cloud_configRange2.1.0–2.1.2
Node
oraclecommunications_cloud_native_core_policyMatch1.15.0
VendorProductVersionCPE
vmwarespring_cloud_config*cpe:2.3:a:vmware:spring_cloud_config:*:*:*:*:*:*:*:*
oraclecommunications_cloud_native_core_policy1.15.0cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*

Related

zdt 1
redhatcve 1
cvelist 1
packetstorm 2
exploitpack 1
metasploit 1
veracode 1
nuclei 1
cve 1
exploitdb 1
osv 2
myhack58 1
prion 1
github 1
openvas 1
oracle 1
zdt
zdt
Spring Cloud Config 2.1.x - Path Traversal Exploit
2019-05-01 00:00:00
redhatcve
redhatcve
CVE-2019-3799
2019-05-13 08:25:09
cvelist
cvelist
CVE-2019-3799 Directory Traversal with spring-cloud-config-server
2019-05-06 15:21:37
packetstorm
packetstorm
Spring Cloud Config Server Directory Traversal
2024-09-01 00:00:00
Spring Cloud Config 2.1.x Path Traversal
2019-04-30 00:00:00
exploitpack
exploitpack
Spring Cloud Config 2.1.x - Path Traversal (Metasploit)
2019-04-30 00:00:00
metasploit
metasploit
Spring Cloud Config Server Directory Traversal
2019-04-18 07:24:34
veracode
veracode
Directory Traversal
2019-04-17 09:12:42
nuclei
nuclei
Spring Cloud Config Server - Local File Inclusion
2020-06-22 13:35:37
cve
cve
CVE-2019-3799
2019-05-06 16:29:01
exploitdb
exploitdb
Spring Cloud Config 2.1.x - Path Traversal (Metasploit)
2019-04-30 00:00:00
osv
osv
Path Traversal in Spring Cloud Config
2019-05-23 08:39:23
CVE-2019-3799
2019-05-06 16:29:01
myhack58
myhack58
Spring Cloud Config directory traversal vulnerability, CVE-2019-3799οΌ‰early warning-vulnerability warning-the black bar safety net
2019-04-19 00:00:00
prion
prion
Directory traversal
2019-05-06 16:29:00
github
github
Path Traversal in Spring Cloud Config
2019-05-23 08:39:23
openvas
openvas
Generic HTTP Directory Traversal (Web Dirs) - Active Check
2021-07-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.5

Confidence

High

EPSS

0.026

Percentile

90.3%

JSON
Related for NVD:CVE-2019-3799
zdt1redhatcve1cvelist1packetstorm2exploitpack1metasploit1veracode1nuclei1cve1exploitdb1osv2myhack581prion1github1openvas1oracle1