CVE-2020-5410 · Sandworm Watch

Mar 25, 2022high

CVE-2020-5410: VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability

Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files. Required action: Apply updates per vendor instructions.

CVE-2020-5410EPSS 95.6%Spring Cloud Configuration (Config) ServerVMware Tanzu

CISA KEV ↗ · unattributed attribution