IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
9.1Kritisch

CVE-2026-40976

Spring Spring Boot; Red Hat Red Hat AMQ Broker 7; Red Hat Red Hat AMQ Clients; Red Hat Red Hat build of Apache Camel for Spring Boot 4 Veröffentlicht: (vor 6 Monaten)

Beschreibung

In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web application; have no Spring Security configuration of its own and rely on the default web security filter chain; depend on spring-boot-actuator-autoconfigure; not depend on spring-boot-health. If any of the above does not apply, the application is not vulnerable. Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.

Schwachstellentyp (CWE): CWE-862CWE-305

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Red Hat Red Hat AMQ Broker 7 —
Red Hat Red Hat AMQ Clients —
Red Hat Red Hat build of Apache Camel for Spring Boot 4 —
Red Hat Red Hat build of Apache Camel - HawtIO 4 —
Red Hat Red Hat build of OptaPlanner 8 —
Red Hat Red Hat Data Grid 8 all versions
Red Hat Red Hat Enterprise Linux 8 —
Red Hat Red Hat Enterprise Linux 9 —
Red Hat Red Hat Fuse 7 —
Red Hat Red Hat JBoss Enterprise Application Platform 7 —
Red Hat Red Hat JBoss Enterprise Application Platform 8 —
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack —
Red Hat Red Hat OpenShift Dev Spaces —
Red Hat Red Hat Process Automation 7 —
Red Hat Red Hat Single Sign-On 7 —
Spring Spring Boot 4.0.0 – < 4.0.6
vmware spring boot 4.0.0 – < 4.0.6

Referenzen und Patches

CPE-Treffer (NVD) (1)
  • cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:* ≥ 4.0.0 < 4.0.6

Neue CVEs im selben Produkt — Red Hat Enterprise Linux

5.5Mittel
CVE-2026-110330

Abrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environ

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This al…

7.8Hoch
CVE-2026-110331

Abrt: abrt: incomplete cve-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count element

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only verifies that a dump directory contains a "count" element, which an unprivileged user can create. This allows a local attacker to bypass the guard a…