← Back

CVE-2026-59292

nvd nist
Published: Aug 27, 2026Modified: Aug 31, 2026

JSON object

Loading...
3.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Exploitability: 1.5 / Impact: 1.4
Source: security@vmware.com (Secondary)

Description

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier

Affected (5)

Vmware
1 product
Spring Integration
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Spring Integration
version < 5.5.22
Spring Integration
6.4.0 ≤ version < 6.4.13
Spring Integration
6.5.0 ≤ version < 6.5.11
Spring Integration
7.0.0 ≤ version < 7.0.5.1
Spring Integration
7.1.0 ≤ version < 7.1.0.1

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.