Directory Traversal Vulnerability in Pivotal Spring Framework
CVE-2014-3578

Currently unrated

Key Information:

Vendor: Pivotal Software
Status: Spring Framework
Vendor: CVE Published:; 19 February 2015

🔔 Create Pivotal Software Vulnerability Alert

What is CVE-2014-3578?

A directory traversal vulnerability in the Pivotal Spring Framework allows remote attackers to read arbitrary files on the server by manipulating crafted URLs. This oversight could lead to unauthorized information exposure, compromising sensitive data and potentially allowing further exploitation of the affected system. It is critical for users of affected versions to apply patches or updates to secure their applications.

References

http://jvn.jp/en/jp/JVN49154900/index.html

third-party-advisoryx_refsource_JVN

http://rhn.redhat.com/errata/RHSA-2015-0720.html

vendor-advisoryx_refsource_REDHAT

http://www.securityfocus.com/bid/68042

vdb-entryx_refsource_BID

EPSS Score

6% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 19, 2015
Vulnerability Reserved
May 14, 2014

CVE-2014-3578 Data

JSON