SB2020060107 - Multiple vulnerabilities in VMware Spring Security 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020060107

SB2020060107 - Multiple vulnerabilities in VMware Spring Security

Published: June 1, 2020

Security Bulletin ID SB2020060107
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Use of insufficiently random values (CVE-ID: CVE-2020-5408)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to the affected software uses a fixed null initialization vector with CBC Mode in the implementation of the queryable text encryptor. A remote authenticated attacker can derive the unencrypted values using a dictionary attack.


2) Improper Verification of Cryptographic Signature (CVE-ID: CVE-2020-5407)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to a signature wrapping issue during SAML response validation when using the "spring-security-saml2-service-provider" component. A remote authenticated attacker can carefully modify an otherwise valid SAML response and append an arbitrary assertion that Spring Security will accept as valid.


Remediation

Install update from vendor's website.

References