CVE-2018-1196: Medium severity VMware Spring Boot vulnerability
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and take ownership of any file on the same system. In order to instigate the attack, the application must be installed as a service and the "runuser" requires shell access to the server. Spring Boot application that are not installed as a service, or are not using the embedded launch script are not susceptible.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1196?
CVE-2018-1196 is a vulnerability in Spring Boot that allows for a symlink attack.
What is the severity of CVE-2018-1196?
The severity of CVE-2018-1196 is medium, with a severity value of 5.9.
Which versions of Spring Boot are affected by CVE-2018-1196?
Spring Boot versions 1.5.9 and 2.0.0.M1 through 2.0.0.M7 are affected by CVE-2018-1196.
How does CVE-2018-1196 allow for a symlink attack?
CVE-2018-1196 allows the "run_user" to overwrite and take ownership of any file on the system through a symlink attack.
Is there a fix for CVE-2018-1196?
Yes, to fix CVE-2018-1196, it is recommended to upgrade to the latest version of Spring Boot.