virus logo Intrusion Prevention

Spring.Boot.Actuator.Unauthorized.Access

description-logoDescription

This indicates an attack attempt to exploit an Unauthorized Access Vulnerability in Spring Boot Actuator.
The vulnerability is due to an default configuration error. An unauthenticated attacker can exploit this via a crafted request, leading to arbitrary code execution within the context of the application.

affected-products-logoAffected Products

Spring Boot with Actuator service enabled by default

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Currently we are unaware of any vendor supplied patch or updates available for this issue.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2022-05-09 20.311 Sig Added
2021-04-06 18.052 Sig Added
2021-01-05 16.991 Sig Added
2020-12-28 16.986 Sig Added
2020-12-09 16.976 Default_action:pass:drop
2020-12-01 16.971
ID 49620
Created Nov 16, 2020
Updated Nov 14, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
Default Action drop
Active
Affected OS Windows, Linux, MacOS
Affected App Other