Test ID:	1.3.6.1.4.1.25623.1.0.114752
Category:	Denial of Service
Title:	VMware Spring Framework < 5.3.38, 6.0.x < 6.0.23, 6.1.x < 6.1.12 DoS Vulnerability - Linux
Summary:	The VMware Spring Framework is prone to a denial of service; (DoS) vulnerability.
Description:	Summary: The VMware Spring Framework is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Applications that parse ETags from 'If-Match' or 'If-None-Match' request headers are vulnerable to DoS attack. Affected Software/OS: VMware Spring Framework versions prior to 5.3.38, 6.0.x prior to 6.0.23 and 6.1.x prior to 6.1.12. Solution: Update to version 5.3.38, 6.0.23, 6.1.12 or later. Vendor note: Users of older, unsupported versions could enforce a size limit on 'If-Match' and 'If-None-Match' headers, e.g. through a Filter. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-38809
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.