← Back

CVE-2026-59292

nvd nist
Published: Aug 27, 2026Modified: Aug 31, 2026

JSON object

Loading...
3.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Exploitability: 1.5 / Impact: 1.4
Source: security@vmware.com (Secondary)

Description

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier

Affected (5)

Vmware
1 product
Spring Integration
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Spring Integration
Before 5.5.22
Spring Integration
From 6.4.0 to 6.4.13
Spring Integration
From 6.5.0 to 6.5.11
Spring Integration
From 7.0.0 to 7.0.5.1
Spring Integration
From 7.1.0 to 7.1.0.1

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.