Symlink privilege escalation Affecting org.springframework.boot:spring-boot-loader-tools package, versions [1.5.0.RELEASE,1.5.10.RELEASE)
Snyk CVSS
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JAVA-ORGSPRINGFRAMEWORKBOOT-31616
- published 6 Feb 2018
- disclosed 10 Jan 2018
- credit Adam Stephens
Introduced: 10 Jan 2018
CVE-2018-1196 Open this link in a new tabHow to fix?
Upgrade org.springframework.boot:spring-boot-loader-tools to version 1.5.10.RELEASE or higher.
Overview
org.springframework.boot:spring-boot-loader-tools is a for Spring Boot Loader Tools.
Affected versions of this package are vulnerable to Symlink privilege escalation. Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier is susceptible to a symlink attack which allows the “run_user” to overwrite and take ownership of any file on the same system.
Note: In order to instigate the attack, the application must be installed as a service and the “run_user” requires shell access to the server.