Vulnerabilities > CVE-2022-31679 - Unspecified vulnerability in VMWare Spring Data Rest
Attack vector
NETWORK Attack complexity
HIGH Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |