CVEvulnerability

CVE-2020-5410

7.5 HIGH Known exploited Published 2020-06-02 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability — VMware Tanzu Spring Cloud Configuration (Config) Server

Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.

Added to KEV: 2022-03-25
Remediation due: 2022-04-15
Ransomware use: Unknown
Required action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2020-5410

Status: Analyzed
Published: 2020-06-02
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-22, CWE-23

Description

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.

Affected configurations

• vmware spring cloud config (>= 2.1.0 < 2.1.9) • vmware spring cloud config (>= 2.2.0 < 2.2.3)

Weakness · CWE (2)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
CWE-23 Relative Path Traversal weakness

References