CVE-2014-3578

Impact:
Moderate
Public Date:
2014-09-05
CWE:
CWE-22
Bugzilla:
1131882: CVE-2014-3578 Spring Framework: Directory traversal
A directory traversal flaw was found in the Spring Framework. A remote attacker could use this flaw to access arbitrary files on a server, and bypassing security restrictions that are otherwise in place.

Find out more about CVE-2014-3578 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

Base Score 5
Base Metrics AV:N/AC:L/Au:N/C:P/I:N/A:N
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact None
Availability Impact None

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Red Hat JBoss Data Virtualization 6.1 RHSA-2015:0675 2015-03-11
Red Hat JBoss Fuse Service Works 6.0 RHSA-2015:0720 2015-03-24
Red Hat JBoss BPMS 6.0 RHSA-2015:0234 2015-02-17
Red Hat JBoss BRMS 6.0 RHSA-2015:0235 2015-02-17

Affected Packages State

Platform Package State
Red Hat JBoss Portal Platform 6 spring Will not fix
Red Hat JBoss Portal 5 spring Will not fix
Red Hat JBoss BRMS 5 spring Will not fix
Unless explicitly stated as not affected, all previous versions of packages in any minor update stream of a product listed here should be assumed vulnerable, although may not have been subject to full analysis.

External References

Last Modified