Lucene search

[email protected]CVE-2022-22978

HistoryMay 19, 2022 - 3:15 p.m.

CVE-2022-22978

2022-05-1915:15:08

CWE-863

[email protected]

web.nvd.nist.gov

219

cve-2022-22978

spring security

authorization bypass

regexrequestmatcher

nvd

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.3%

JSON

In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an authorization bypass.

Affected configurations

NVD

Node

vmwarespring_securityRange<5.5.7

vmwarespring_securityRange5.6.0–5.6.4

Node

oraclefinancial_services_crime_and_compliance_management_studioMatch8.0.8.2.0

oraclefinancial_services_crime_and_compliance_management_studioMatch8.0.8.3.0

Node

netappactive_iq_unified_managerMatch-linux

netappactive_iq_unified_managerMatch-vmware_vsphere

netappactive_iq_unified_managerMatch-windows

CPENameOperatorVersion
vmware:spring_securityvmware spring securitylt5.5.7
vmware:spring_securityvmware spring securitylt5.6.4

CPE	Name	Operator	Version
vmware:spring_security	vmware spring security	lt	5.5.7
vmware:spring_security	vmware spring security	lt	5.6.4

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Spring Security",
    "versions": [
      {
        "version": "Spring security versions 5.4.x prior to 5.4.11+,5.5.x prior to 5.5.7+,5.6.x prior to 5.6.4+ and all earlier unsupported versions",
        "status": "affected"
      }
    ]
  }
]