CVE-2023-20866

In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://spring.io/security/cve-2023-20866	Vendor Advisory
https://spring.io/security/cve-2023-20866	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:vmware:spring_session:3.0.0:*:*:*:*:*:*:*

History

21 Nov 2024, 07:41

Type	Values Removed	Values Added
References	~~() https://spring.io/security/cve-2023-20866 - Vendor Advisory~~	() https://spring.io/security/cve-2023-20866 - Vendor Advisory

21 Apr 2023, 18:51

Type	Values Removed	Values Added
References	~~(MISC) https://spring.io/security/cve-2023-20866 -~~	(MISC) https://spring.io/security/cve-2023-20866 - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.5
First Time		Vmware spring Session Vmware
CWE		NVD-CWE-noinfo
CPE		cpe:2.3:a:vmware:spring_session:3.0.0:::::::*

13 Apr 2023, 20:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-04-13 20:15

Updated : 2025-02-07 17:15

NVD link : CVE-2023-20866

Mitre link : CVE-2023-20866

CVE.ORG link : CVE-2023-20866

JSON object : View

Products Affected

vmware

spring_session

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo

{"id": "CVE-2023-20866", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2023-04-13T20:15:08.263", "references": [{"url": "https://spring.io/security/cve-2023-20866", "tags": ["Vendor Advisory"], "source": "security@vmware.com"}, {"url": "https://spring.io/security/cve-2023-20866", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@vmware.com", "description": [{"lang": "en", "value": "CWE-200"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application is vulnerable if it is using HeaderHttpSessionIdResolver."}], "lastModified": "2025-02-07T17:15:24.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vmware:spring_session:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1779D321-04BD-4FAA-A743-35D9DE97CC75"}], "operator": "OR"}]}], "sourceIdentifier": "security@vmware.com"}