CVE-2018-1272: Input Validation
Pivotal Spring Framework could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper input validation. By sending a specially-crafted request, an attacker could exploit this vulnerability to gain elevated privileges.
Other sources
Spring Framework provides client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and then uses that input to make a multipart request to another server (server B), it can be exposed to an attack, where an extra multipart is inserted in the content of the request from server A, causing server B to use the wrong value for a part it expects. This could to lead privilege escalation, for example, if the part content represents a username or user roles.
In order for the attacker to succeed, they would have to be able to guess the multipart boundary value chosen by server A for the multipart request to server B, which requires the attacker to also have control of the server or the ability to see the HTTP log of server A through a separate attack vector.
External References:
https://pivotal.io/security/cve-2018-1272
— Red Hat
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and then uses that input to make a multipart request to another server (server B), it can be exposed to an attack, where an extra multipart is inserted in the content of the request from server A, causing server B to use the wrong value for a part it expects. This could to lead privilege escalation, for example, if the part content represents a username or user roles.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2018-1272?
CVE-2018-1272 is considered a high severity vulnerability due to the potential for remote authenticated attackers to gain elevated privileges.
How do I fix CVE-2018-1272?
To remediate CVE-2018-1272, upgrade the Spring Framework to version 5.0.5 or 4.3.15 or later.
What type of vulnerability is CVE-2018-1272?
CVE-2018-1272 is an input validation vulnerability that can lead to privilege escalation.
What systems are affected by CVE-2018-1272?
Systems running vulnerable versions of Spring Framework, including various Oracle and IBM products, are affected by CVE-2018-1272.
Can CVE-2018-1272 be exploited remotely?
Yes, CVE-2018-1272 can be exploited remotely by sending specially-crafted requests to the vulnerable application.