CVE-2026-59300

Published: Aug 27, 2026Modified: Sep 2, 2026

3.5

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Exploitability: 0.9 / Impact: 2.5

Source: NVD

Description

Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier

Affected (4)

Products: Vmware: Spring Cloud Function

Vmware

1 product

Spring Cloud Function

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Vmware Spring Cloud Function	From 3.2.0 to 3.2.17
Vmware Spring Cloud Function	From 4.2.0 to 4.2.8
Vmware Spring Cloud Function	From 4.3.0 to 4.3.5
Vmware Spring Cloud Function	From 5.0.0 to 5.0.4

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

https://spring.io/security/cve-2026-59300

Source: security@vmware.com

PatchVendor Advisory

Timeline

No history available yet.