VMware Spring Cloud Config Directory Traversal (CVE-2020-5405)

Related Vulnerabilities: CVE-2020-5405  

Check Point Reference: CPAI-2020-4130 Date Published: 28 Feb 2024 Severity: Medium Last Updated: Wednesday 28 February, 2024 Source: Industry Reference:CVE-2020-5405
Protection Provided by:

Security Gateway
R81, R80, R77, R75

Who is Vulnerable? VMware Spring Cloud Config 2.1.0 and later, prior to 2.1.7
VMware Spring Cloud Config 2.2.0 and later, prior to 2.2.2 Vulnerability Description A directory traversal vulnerability exists in VMware Spring Cloud Config. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system.