Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight     requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module)     endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include     credentials and therefore requests should fail authentication. However a notable exception to this are     Chrome based browsers when using client certificates for authentication since Chrome sends TLS client     certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or     received as a result of this attack. (CVE-2020-5397)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight
    requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module)
    endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include
    credentials and therefore requests should fail authentication. However a notable exception to this are
    Chrome based browsers when using client certificates for authentication since Chrome sends TLS client
    certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or
    received as a result of this attack. (CVE-2020-5397)

ID	Name	Product	Family	Type	Severity
256857	Linux Distros Unpatched Vulnerability : CVE-2020-5397	Nessus	Misc.	Local	medium
422565	SCA: security update for org.springframework:spring-webflux, org.springframework:spring-webmvc (GHSA-7pm4-g2qj-j85x)	Tenable Cloud Security	SCA Checks	Local	medium
422565	SCA: security update for org.springframework:spring-webflux, org.springframework:spring-webmvc (GHSA-7pm4-g2qj-j85x)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2020-5397

medium

Tenable Plugins

medium

medium

medium