Published: 06/05/2019 Updated: 13/06/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 436

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Spring Cloud Config, versions 2.1.x before 2.1.2, versions 2.0.x before 2.0.4, and versions 1.4.x before 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vmware spring cloud config
oracle communications cloud native core policy 1.15.0

Impact: Moderate Public Date: 2019-04-16 CWE: CWE-22 Bugzilla: 1709202: CVE-2019-3799 spring-cloud-conf ...

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Auxiliary::Report include Msf::Auxiliary::Scanner include Msf::Exploit::Remote::HttpClient def initialize(info = {}) super(update_info(info, ...

A collection of vulnerable applications for research purposes

Vuln Chest A collection of vulnerable applications for research purposes CVEs CVE-2018-15473: OpenSSH User Enumeration CVE-2019-3799: Spring Cloud Config Server - Directory Traversal Vulnerability CVE-2019-5420: Ruby On Rails - DoubleTap Development Mode secret_key_base Remote Code Execution

CVE-2019-3799 - Spring Cloud Config Server: Directory Traversal < 2.1.2, 2.0.4, 1.4.6

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal < 212, 204, 146 Spring Cloud Config Server is vulnerable to a directory Traversal / Path traversal / File Content Disclosure < 212, 204, 146 Spring Cloud Config, versions 21x prior to 212, versions 20x prior to 204, and versions 14x prior to 146, and older unsupported versions

CWE-22 https://pivotal.io/security/cve-2019-3799 https://www.oracle.com/security-alerts/cpuapr2022.html https://nvd.nist.gov https://github.com/sa7mon/vulnchest https://www.exploit-db.com/exploits/46772 https://access.redhat.com/security/cve/cve-2019-3799

CVE-2019-3799

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect