PT-2025-32409 · Unknown · Spring Actuator Interface+1
CVSS v4.0
5.5
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
zlt2000 microservices-platform versions through 6.0.0
Description
A vulnerability exists in zlt2000 microservices-platform. The issue affects unknown code within the
/actuator file of the Spring Actuator Interface component, leading to information disclosure. The attack can be initiated remotely. The exploit has been publicly disclosed.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Access Control
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Spring Actuator Interface
Zlt2000 Microservices-Platform