Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2026-47873

Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Spring Spring Tools for Eclipse

Default version status: unaffected

  • 0 to ≤ 5.2.0affected

References