virus logo Intrusion Prevention

Spring.Boot.Actuator.Unauthorized.Access

description-logoDescription

This indicates an attack attempt to exploit an Unauthorized Access Vulnerability in Spring Boot Actuator.
The vulnerability is due to an default configuration error. An unauthenticated attacker can exploit this via a crafted request, leading to arbitrary code execution within the context of the application.

affected-products-logoAffected Products

Spring Boot with Actuator service enabled by default

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Currently we are unaware of any vendor supplied patch or updates available for this issue.

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Status Detail
2022-05-09 20.311
Modified
 Sig Added
2021-04-06 18.052
Modified
 Sig Added
2021-01-05 16.991
Modified
 Sig Added
2020-12-28 16.986
Modified
 Sig Added
2020-12-09 16.976
Modified
 Default_action:pass:drop
2020-12-01 16.971
New
ID 49620
Created Nov 16, 2020
Updated Nov 14, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
Default Action drop
Active
Affected OS Windows, Linux, MacOS
Affected App Other
Profile Type Permission/Privilege/Access Control