Spring Tools for Eclipse vulnerabilities
3 known vulnerabilities in Spring Tools for Eclipse from Spring. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.3 High severity
Spring Tools for Eclipse: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Cloud Foundry app) from the Spring Tools Boot Dashboard, Spring Tools generates a shared secret that authenticates DevTools remote-restart uploads to
- 8.0 High severity
Spring Tools for Eclipse: Binding to an Unrestricted IP Address
The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earli
- 8.0 High severity
Spring Tools for Eclipse: Missing Authentication for Critical Functionality
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Sp