Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Spring Cloud Config 3.1.14, 4.1.10 and 3 more versions Clear all filters
TI-2026-29632 CVE-2026-40981 · GHSA-2mh5-3cw6-hrrq

Authorization bypass in VMware Spring Cloud Config

Priority LOW 39

When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00435 Published 2026-05-07 Fixed in 3.1.14, 4.1.10 +3 CWE-639
TI-2026-29653 CVE-2026-41002 · GHSA-86wq-234q-r6wg

Time-of-check time-of-use race condition in VMware Spring Cloud Config

Priority LOW 37

The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0022 Published 2026-05-07 Fixed in 3.1.14, 4.1.10 +3 CWE-367
TI-2026-29655 CVE-2026-41004 · GHSA-j6hh-h3cf-c2hf

Sensitive information in log files in VMware Spring Cloud Config

Priority LOW 20

When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00168 Published 2026-05-07 Partial fix · 3.1.14, 4.1.10 +3 CWE-532
TI-2026-29633 CVE-2026-40982 · GHSA-6g23-24mc-hx6x

Path traversal in VMware Spring Cloud Config

Priority MEDIUM 48

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00727 Published 2026-05-07 Fixed in 3.1.14, 4.1.10 +3 CWE-22