Red Hat Security Advisory

RHSA-2023:0272

Red Hat support for Spring Boot 2.7.2.SP1 security update

Released 2023-02-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Spring Boot 2.7.2.SP1

Fixes 1 record

TI-2022-07334 CVE-2022-23181 · GHSA-9f3j-pm6f-9fm5

Local privilege escalation with FileStore

LOW 32

The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00692 Published 2022-01-27 Partial fix · 10.0.16, 9.0.58 +1 CWE-367