CVE-2016-9878 - CVE Vulnerability

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks. (CVSS:5.0) (Last Update:2016-12-29)

Vulnerability Details : An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks. Publish Date : 2016-12-29 Last Update Date : 2016-12-29 - CVSS Scores & Vulnerability Types CVSS Score 5.0 Confidentiality Impact Partial(There is considerable informational disclosure.) Integrity Impact None(There is no impact to the integrity of the system) Availability Impact None(There is no impact to the availability of the system.) Access Complexity Low(Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. ) Authentication Not required(Authentication is not required to exploit the vulnerability.) Gained Access None Vulnerability Type(s) Directory traversal CWE ID 22 - Products Affected By CVE-2016-9878 # Product Type Vendor Product Version Update Edition Language 1 Application Pivotal Software Spring Framework 3.2.0 Version Details Vulnerabilities 2 Application Pivotal Software Spring Framework 3.2.1 Version Details Vulnerabilities 3 Application Pivotal Software Spring Framework 3.2.2 Version Details Vulnerabilities 4 Application Pivotal Software Spring Framework 3.2.3 Version Details Vulnerabilities 5 Application Pivotal Software Spring Framework 3.2.4 Version Details Vulnerabilities 6 Application Pivotal Software Spring Framework 3.2.5 Version Details Vulnerabilities 7 Application Pivotal Software Spring Framework 3.2.6 Version Details Vulnerabilities 8 Application Pivotal Software Spring Framework 3.2.7 Version Details Vulnerabilities 9 Application Pivotal Software Spring Framework 3.2.8 Version Details Vulnerabilities 10 Application Pivotal Software Spring Framework 3.2.9 Version Details Vulnerabilities 11 Application Pivotal Software Spring Framework 3.2.10 Version Details Vulnerabilities 12 Application Pivotal Software Spring Framework 3.2.11 Version Details Vulnerabilities 13 Application Pivotal Software Spring Framework 3.2.12 Version Details Vulnerabilities 14 Application Pivotal Software Spring Framework 3.2.13 Version Details Vulnerabilities 15 Application Pivotal Software Spring Framework 3.2.14 Version Details Vulnerabilities 16 Application Pivotal Software Spring Framework 3.2.15 Version Details Vulnerabilities 17 Application Pivotal Software Spring Framework 3.2.16 Version Details Vulnerabilities 18 Application Pivotal Software Spring Framework 3.2.17 Version Details Vulnerabilities 19 Application Pivotal Software Spring Framework 4.2.0 Version Details Vulnerabilities 20 Application Pivotal Software Spring Framework 4.2.1 Version Details Vulnerabilities 21 Application Pivotal Software Spring Framework 4.2.2 Version Details Vulnerabilities 22 Application Pivotal Software Spring Framework 4.2.3 Version Details Vulnerabilities 23 Application Pivotal Software Spring Framework 4.2.4 Version Details Vulnerabilities 24 Application Pivotal Software Spring Framework 4.2.5 Version Details Vulnerabilities 25 Application Pivotal Software Spring Framework 4.2.6 Version Details Vulnerabilities 26 Application Pivotal Software Spring Framework 4.2.7 Version Details Vulnerabilities 27 Application Pivotal Software Spring Framework 4.2.8 Version Details Vulnerabilities 28 Application Pivotal Software Spring Framework 4.3.0 Version Details Vulnerabilities 29 Application Pivotal Software Spring Framework 4.3.1 Version Details Vulnerabilities 30 Application Pivotal Software Spring Framework 4.3.2 Version Details Vulnerabilities 31 Application Pivotal Software Spring Framework 4.3.3 Version Details Vulnerabilities 32 Application Pivotal Software Spring Framework 4.3.4 Version Details Vulnerabilities - Number Of Affected Versions By Product Vendor Product Vulnerable Versions Pivotal Software Spring Framework 32 - References For CVE-2016-9878 https://pivotal.io/security/cve-2016-9878 CONFIRM

- Metasploit Modules Related To CVE-2016-9878 There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)