Paper/Archive/CVE-2022-22963

CVE-2022-22963

VMware Tanzu Spring Cloud — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

KEV · due 15 Sep EPSS 100%public exploit SSVC act CVSS 9.8

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 100.01.000 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Affected

ProductAffectedFixed inSource

Spring Cloud FunctionSpring Cloud Function versions 3.1.6, 3.2.2 and all old and unsupported versions–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

reftanzu.vmware.com/security/cve-2022-22963 advisorytools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-scf-rce-DQrHhJxH reforacle.com/security-alerts/cpuapr2022.html refpsirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005 reforacle.com/security-alerts/cpujul2022.html refpacketstormsecurity.com/files/173430/Spring-Cloud-3.2.2-Remote-Command-Execution.html refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22963 kevcisa.gov/known-exploited-vulnerabilities-catalog