CVE-2021-22118
High
Description
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Vmware Spring Framework
PublishedMay 27, 2021
First seenMay 27, 2021
Weakness typeCWE-269Improper privilege management
How to fix
Update
- vmware spring_framework5.2.15, 5.3.7 or later
- org.springframework:spring-web5.2.15, 5.3.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware spring_framework | 5.2.0 ≤ v < 5.2.15, 5.3.0 ≤ v < 5.3.7 | 5.2.15, 5.3.7 |
| oracle commerce_guided_search | 11.3.2 | — |
| oracle communications_brm_-_elastic_charging_engine | 12.0.0.3 | — |
| oracle communications_cloud_native_core_binding_support_function | 1.9.0 | — |
| oracle communications_cloud_native_core_policy | 1.14.0 | — |
| oracle communications_cloud_native_core_security_edge_protection_proxy | 1.6.0 | — |
| oracle communications_cloud_native_core_service_communication_proxy | 1.14.0 | — |
| oracle communications_cloud_native_core_unified_data_repository | 1.14.0 | — |
| oracle communications_diameter_intelligence_hub | 8.0.0 ≤ v ≤ 8.1.0, 8.2.0 ≤ v ≤ 8.2.3 | — |
| oracle communications_element_manager | 8.2.0 ≤ v ≤ 8.2.4.0 | — |
| oracle communications_interactive_session_recorder | 6.4 | — |
| oracle communications_network_integrity | 7.3.6 | — |
| oracle communications_session_report_manager | 8.0.0 ≤ v ≤ 8.2.4.0 | — |
| oracle communications_session_route_manager | 8.0.0 ≤ v ≤ 8.2.4.0 | — |
| oracle communications_unified_inventory_management | 7.4.1, 7.4.2, 7.5.0 | — |
| oracle documaker | 12.6.0 ≤ v ≤ 12.6.4 | — |
| oracle enterprise_data_quality | 12.2.1.3.0, 12.2.1.4.0 | — |
| oracle financial_services_analytical_applications_infrastructure | 8.0.8 ≤ v ≤ 8.1.1 | — |
| oracle healthcare_data_repository | 8.1.0 | — |
| oracle insurance_policy_administration | 11.0 ≤ v ≤ 11.3.1 | — |
| oracle insurance_rules_palette | 11.0.2, 11.1.0, 11.2.7, 11.3.0, 11.3.1 | — |
| oracle mysql_enterprise_monitor | v ≤ 8.0.25 | — |
| oracle retail_assortment_planning | 16.0 | — |
| oracle retail_customer_management_and_segmentation_foundation | 16.0 ≤ v ≤ 19.0 | — |
| oracle retail_financial_integration | 14.1.3.2, 15.0.3.1, 16.0.3 | — |
| oracle retail_integration_bus | 14.1.3.2, 15.0.3.1, 16.0.3 | — |
| oracle retail_merchandising_system | 19.0.1 | — |
| oracle retail_order_broker | 16.0 | — |
| oracle retail_predictive_application_server | 14.1.3, 15.0.3, 16.0.3 | — |
| oracle utilities_testing_accelerator | 6.0.0.1.1, 6.0.0.2.2, 6.0.0.3.1 | — |
| netapp hci | No range specified | — |
| netapp management_services_for_element_software | No range specified | — |
| org.springframework:spring-webMaven | 5.2.0 ≤ v < 5.2.15, 5.3.0 ≤ v < 5.3.7 | 5.2.15, 5.3.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.