Framework: Directory traversal

🗓️ 11 Mar 2015 16:51:20Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 2 Views

Directory traversal flaw in the Spring Framework lets attackers access files and bypass security.

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: Pivotal Spring Framework vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (TADDM)	17 Jun 201815:35	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSource GoPivotal Spring Framework Vulnerabilities affect IBM Security Guardium (CVE-2014-3578, CVE-2014-3625)	16 Jun 201821:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is vulnerable to using Components with Known Vulnerabilities	16 Jun 201822:05	–	ibm
IBM Security Bulletins	Security Bulletin: Pivotal Spring Framework as used in IBM QRadar SIEM is vulnerable to various CVE's	16 Jun 201821:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities identified in IBM StoredIQ	20 Feb 202012:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open Source used in IBM Cloud Pak System	7 Jul 202016:58	–	ibm
CVE	CVE-2014-3578	19 Feb 201520:00	–	cve
Cvelist	CVE-2014-3578	19 Feb 201520:00	–	cvelist
Debian	[SECURITY] [DLA 1853-1] libspring-java security update	13 Jul 201921:20	–	debian
Debian CVE	CVE-2014-3578	19 Feb 201520:00	–	debiancve

Vulners

Node

redhat jboss_data_virtualizationRange<6.1

AND

redhat enterprise_linux

Source	Link
pivotal	www.pivotal.io/security/cve-2014-3578
access	www.access.redhat.com/security/cve/CVE-2014-3578
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
jvn	www.jvn.jp/en/jp/JVN49154900/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-3578
cve	www.cve.org/CVERecord

14 May 2026 22:17Current

7.4High risk

Vulners AI Score7.4

CVSS 25

EPSS0.06215

directory traversal spring framework remote attacker arbitrary files bypass security