HTTP: Spring Data REST CVE-2017-8046 Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Spring Data REST. A successful attack can lead to arbitrary code execution.
Extended Description
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.
Affected Products
Vmware spring_boot
Short Name
HTTP:CTS:CVE-2017-8046-RCE
Severity
Major
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2017-8046 Code Data Execution REST Remote Spring bid:100948
Release Date
03/24/2020
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3693
False Positive
Unknown
Vendors
Pivotal_software
Vmware
CVSS Score
7.5