← Back

CVE-2026-47873

nvd nist
Published: Jul 30, 2026Modified: Sep 30, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: security@vmware.com (Secondary)

Description

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Affected (1)

Broadcom
1 product
Spring Tools
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Spring Tools
version < 5.3.0

Related CWEs

CWE-1327
Binding to an Unrestricted IP Address
The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.