Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a regular expression, denial of service attack.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported     versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP     broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the     broker that can lead to a regular expression, denial of service attack. (CVE-2018-1257)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported
    versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP
    broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the
    broker that can lead to a regular expression, denial of service attack. (CVE-2018-1257)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component:

  - A deserialization vulnerability in Apache Commons     FileUpload allows for remote code execution.
    (CVE-2016-1000031)

  - An information disclosure vulnerability exists in OpenSSL     due to the potential for a side-channel timing attack.
    An unauthenticated attacker can exploit this to disclose     potentially sensitive information. (CVE-2018-0734)

  - A denial of service (DoS) vulnerability exists in Apache     HTTP Server 2.4.17 to 2.4.34, due to a design error. An     unauthenticated, remote attacker can exploit this issue     by sending continuous, large SETTINGS frames to cause a     client to occupy a connection, server thread and CPU     time without any connection timeout coming to effect.
    This affects only HTTP/2 connections. A possible     mitigation is to not enable the h2 protocol.
    (CVE-2018-11763).

  - Networking component of Enterprise Manager Base Platform     (Spring Framework) is easily exploited and may allow an     unauthenticated, remote attacker to takeover the     Enterprise Manager Base Platform. (CVE-2018-1258)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component:

  - Networking component of Enterprise Manager Base Platform (Spring Framework)   is easily exploited and may allow an unauthenticated, remote attacker to takeover   the Enterprise Manager Base Platform.
  (CVE-2018-1258, CVE-2018-11039, CVE-2018-11040, CVE-2018-1257, CVE-2018-15756)

  - Agent Next Gen (IBM Java) vulnerability allows unauthenticated, remote attacker   unauthorized access to critical data or complete access to all Enterprise Manager   Base Platform accessible data. (CVE-2018-1656, CVE-2018-12539)

  - An information disclosure vulnerability exists in OpenSSL due to the potential   for a side-channel timing attack. An unauthenticated attacker can exploit   this to disclose potentially sensitive information.   (CVE-2018-0734, CVE-2018-0735, CVE-2018-5407)

ID	Name	Product	Family	Type	Severity
253353	Linux Distros Unpatched Vulnerability : CVE-2018-1257	Nessus	Misc.	Local	medium
423214	SCA: security update for org.springframework:spring-core (GHSA-rcpf-vj53-7h2m)	Tenable Cloud Security	SCA Checks	Local	medium
423214	SCA: security update for org.springframework:spring-core (GHSA-rcpf-vj53-7h2m)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
125147	Oracle Enterprise Manager Ops Center (Apr 2019 CPU)	Nessus	Misc.	Local	critical
124157	Oracle Enterprise Manager Cloud Control (Apr 2019 CPU)	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2018-1257

medium

Tenable Plugins

medium

medium

medium

critical

high