VMware Spring Security up to 5.6.8/5.7.4 improper authorization

Summaryinfo

A vulnerability, which was classified as critical, was found in VMware Spring Security up to 5.6.8/5.7.4. This vulnerability affects unknown code. Executing a manipulation can lead to improper authorization. This vulnerability appears as CVE-2022-31690. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in VMware Spring Security up to 5.6.8/5.7.4. It has been declared as critical. This vulnerability affects some unknown functionality. The manipulation with an unknown input leads to a improper authorization vulnerability. The CWE definition for the vulnerability is CWE-285. The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the browser) to the Authorization Server which can lead to a privilege escalation on the subsequent approval. This scenario can happen if the Authorization Server responds with an OAuth2 Access Token Response containing an empty scope list (per RFC 6749, Section 5.1) on the subsequent request to the token endpoint to obtain the access token.

The weakness was presented 11/01/2022. The advisory is available at tanzu.vmware.com. This vulnerability was named CVE-2022-31690 since 05/25/2022. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1548.002 by the MITRE ATT&CK project.

The vulnerability scanner Nessus provides a plugin with the ID 260012 (Linux Distros Unpatched Vulnerability : CVE-2022-31690), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 5.6.9 or 5.7.5 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (260012). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• VMware

Name

• Spring Security

Version

• 5.6.0
• 5.6.1
• 5.6.2
• 5.6.3
• 5.6.4
• 5.6.5
• 5.6.6
• 5.6.7
• 5.6.8
• 5.7.0
• 5.7.1
• 5.7.2
• 5.7.3
• 5.7.4

License

• commercial

Website

• Vendor: https://www.vmware.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion