jvndb - jvndb-2022-000088

jvndb-2022-000088

Vulnerability from jvndb

Published

2022-11-14 16:45

Modified

2024-06-06 16:11

Severity ?

9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) vulnerable to ClassLoader manipulation

Details

The past versions of TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) are vulnerable to a ClassLoader manipulation vulnerability due to using the old version of Spring Framework which contains the vulnerability. According to the developer, this vulnerability is caused by an improper input validation issue (CWE-20) in the binding mechanism of Spring MVC. NTT DATA Corporation reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and NTT DATA Corporation coordinated under the Information Security Early Warning Partnership.

References

▼	Type	URL
	JVN	https://jvn.jp/en/jp/JVN54728399/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2022-43484
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-43484
	Related document	https://github.com/spring-projects/spring-framework/issues/15724
	Improper Input Validation(CWE-20)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

▼	Vendor	Product
	NTT DATA	TERASOLUNA Global Framework
	NTT DATA	TERASOLUNA Server Framework for Java (Rich)

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000088.html",
  "dc:date": "2024-06-06T16:11+09:00",
  "dcterms:issued": "2022-11-14T16:45+09:00",
  "dcterms:modified": "2024-06-06T16:11+09:00",
  "description": "The past versions of TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) are vulnerable to a ClassLoader manipulation vulnerability due to using the old version of Spring Framework which contains the vulnerability.\r\nAccording to the developer, this vulnerability is caused by an improper input validation issue (CWE-20) in the binding mechanism of Spring MVC.\r\n\r\nNTT DATA Corporation reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and NTT DATA Corporation coordinated under the Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000088.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:nttdata:terasoluna_global_framework",
      "@product": "TERASOLUNA Global Framework",
      "@vendor": "NTT DATA",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:nttdata:terasoluna_server_framework_for_java_%28rich%29",
      "@product": "TERASOLUNA Server Framework for Java (Rich)",
      "@vendor": "NTT DATA",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "7.5",
      "@severity": "High",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "9.8",
      "@severity": "Critical",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2022-000088",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN54728399/index.html",
      "@id": "JVN#54728399",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2022-43484",
      "@id": "CVE-2022-43484",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-43484",
      "@id": "CVE-2022-43484",
      "@source": "NVD"
    },
    {
      "#text": "https://github.com/spring-projects/spring-framework/issues/15724",
      "@id": "Minor issue with fix for CVE 2010-1622 [SPR-11098] #15724",
      "@source": "Related document"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) vulnerable to ClassLoader manipulation"
}

cve-2022-43484

Vulnerability from cvelistv5

Published

2022-12-05 00:00

Modified

2024-08-03 13:32

Severity ?

Summary

TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1 are vulnerable to a ClassLoader manipulation vulnerability due to using the old version of Spring Framework which contains the vulnerability.The vulnerability is caused by an improper input validation issue in the binding mechanism of Spring MVC. By the application processing a specially crafted file, arbitrary code may be executed with the privileges of the application.

References

▼	URL	Tags
	http://terasolunaorg.github.io/vulnerability/cve-2022-43484.html
	https://osdn.net/projects/terasoluna/wiki/cve-2022-43484
	https://jvn.jp/en/jp/JVN54728399/index.html

Impacted products

▼	Vendor	Product
	NTT DATA Corporation	TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T13:32:59.591Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://terasolunaorg.github.io/vulnerability/cve-2022-43484.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://osdn.net/projects/terasoluna/wiki/cve-2022-43484"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN54728399/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich)",
          "vendor": "NTT DATA Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1 are vulnerable to a ClassLoader manipulation vulnerability due to using the old version of Spring Framework which contains the vulnerability.The vulnerability is caused by an improper input validation issue in the binding mechanism of Spring MVC. By the application processing a specially crafted file, arbitrary code may be executed with the privileges of the application."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "ClassLoader manipulation vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-05T00:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "http://terasolunaorg.github.io/vulnerability/cve-2022-43484.html"
        },
        {
          "url": "https://osdn.net/projects/terasoluna/wiki/cve-2022-43484"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN54728399/index.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2022-43484",
    "datePublished": "2022-12-05T00:00:00",
    "dateReserved": "2022-10-22T00:00:00",
    "dateUpdated": "2024-08-03T13:32:59.591Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted