CVE-2022-22947: VMware Spring Cloud Gateway Code Injection Vulnerability

Q: What is CVE-2022-22947?

CVE-2022-22947 is a code injection vulnerability in VMware Spring Cloud Gateway, allowing arbitrary remote execution.

Q: What is affected by CVE-2022-22947?

Spring Cloud Gateway versions prior to 3.1.1+ and 3.0.7+ are affected by CVE-2022-22947, as well as certain Oracle products.

Q: How severe is CVE-2022-22947?

CVE-2022-22947 is classified as critical and has a severity score of 10.

Q: How do I fix CVE-2022-22947?

To fix CVE-2022-22947, upgrade to Spring Cloud Gateway version 3.1.1+ or 3.0.7+. Apply the provided fix for affected Oracle products.

Q: Where can I find more information about CVE-2022-22947?

You can find more information about CVE-2022-22947 at the NIST National Vulnerability Database (NVD) and VMware Security Advisory pages.

Published Mar 3, 2022

Updated

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

Other sources

In Spring Cloud Gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed, and unsecured. A remote attacker could make a maliciously crafted request resulting in arbitrary remote execution on the remote host.

Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.

— CISA

Affected Software

19 affected componentsFixes available

maven/org.springframework.cloud:spring-cloud-gateway>=3.1.0<3.1.1

3.1.1

maven/org.springframework.cloud:spring-cloud-gateway<3.0.7

3.0.7

VMware Spring Cloud Gateway

VMware Spring Cloud Gateway<3.0.7

VMware Spring Cloud Gateway=3.1.0

Oracle Commerce Guided Search=11.3.2

Oracle Communications Cloud Native Core Binding Support Function=1.11.0

Oracle Communications Cloud Native Core Binding Support Function=22.1.3

Oracle Communications Cloud Native Core Console=22.2.0

Oracle Communications Cloud Native Core Network Exposure Function=22.1.0

Oracle Communications Cloud Native Core Network Function Cloud Native Environment=1.10.0

Oracle Communications Cloud Native Core Network Repository Function=1.15.0

Oracle Communications Cloud Native Core Network Repository Function=1.15.1

Oracle Communications Cloud Native Core Network Repository Function=22.1.2

Oracle Communications Cloud Native Core Network Repository Function=22.2.0

Oracle Communications Cloud Native Core Network Slice Selection Function=1.8.0

Oracle Communications Cloud Native Core Network Slice Selection Function=22.1.0

Oracle Communications Cloud Native Core Security Edge Protection Proxy=22.1.1

Oracle Communications Cloud Native Core Service Communication Proxy=1.15.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade maven/org.springframework.cloud:spring-cloud-gateway to a version that resolves this vulnerability.
Fixed in 3.1.1
Upgrade
Upgrade maven/org.springframework.cloud:spring-cloud-gateway to a version that resolves this vulnerability.
Fixed in 3.0.7
Upgrade
Upgrade Spring Cloud Gateway to a version that resolves this vulnerability.
Fixed in 3.1.1
Upgrade
Upgrade Spring Cloud Gateway to a version that resolves this vulnerability.
Fixed in 3.0.7

Event History

Mar 3, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·10:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Mar 4, 2022

Advisory Published

12:00 AM

May 16, 2022

Known Exploited

via CISA·12:00 AM

Frequently Asked Questions

What is CVE-2022-22947?

CVE-2022-22947 is a code injection vulnerability in VMware Spring Cloud Gateway, allowing arbitrary remote execution.

What is affected by CVE-2022-22947?