NetSight
IP …
critical10.0Known exploitedPublic exploit code

CVE-2022-22947

VMware Spring Cloud Gateway Code Injection Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-05-16. Federal due date: 2022-06-06.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

Affected products

VendorProductAffected versions
VmwareSpring Cloud Gateway
before 3.0.7
Version 3.1.0
OracleCommerce Guided Search
Version 11.3.2
OracleCommunications Cloud Native Core Binding Support Function
Versions 1.11.0, 22.1.3
OracleCommunications Cloud Native Core Console
Version 22.2.0
OracleCommunications Cloud Native Core Network Exposure Function
Version 22.1.0
OracleCommunications Cloud Native Core Network Function Cloud Native Environment
Version 1.10.0
OracleCommunications Cloud Native Core Network Repository Function
Versions 1.15.0, 1.15.1, 22.1.2, 22.2.0
OracleCommunications Cloud Native Core Network Slice Selection Function
Versions 1.8.0, 22.1.0
OracleCommunications Cloud Native Core Security Edge Protection Proxy
Version 22.1.1
OracleCommunications Cloud Native Core Service Communication Proxy
Version 1.15.0

Weakness classification

CWE-94CWE-917

References