{"cvss":0.0,"datePublished":"2022-03-25","dateUpdated":"2022-03-25","description":"Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.","dueDate":"2022-04-15","id":"CVE-2020-5410","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5410","product":"Spring Cloud Configuration (Config) Server","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability","vendor":"VMware Tanzu"}