SOURCE FACT
VMware Tanzu · Spring Cloud Configuration (Config) Server
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
Required action
Apply updates per vendor instructions.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2020-5410
View source evidence →