3566105 - Spring Framework Path Traversal Vulnerability - CVE-2024-38819 detected in Introscope EM 10.8

Symptom

After running a scanner tool, a vulnerability was detected for Spring Framework Path Traversal - CVE-2024-38819 in Introscope Enterprise Manager (EM) 10.8 file below:

/product/enterprisemanager/configuration/org.eclipse.osgi/bundles/13/1/.cp/WebContent/WEB-INF/lib/spring-web-4.3.22.RELEASE.jar

Environment

Introscope Enterprise Manager 10.8 SP0

Product

SAP Extended Diagnostics by CA Wily all versions

Keywords

Spring Framework, Path Traversal, Vulnerability, CVE-2024-38819, EM, SAP Solution Manager, Upgrade, 10.8 SP1, Vulnerability Scanner Tool , KBA , XX-PART-WILY , Introscope by CA Technologies , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.