Skip to content
OpenAdvisories
High · 8.0 CVE-2026-47873 EUVD-2026-50972GHSA-ph62-g3gp-mmvr

Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

Published Jul 30, 2026 · Updated Aug 1, 2026 · Assigned by vmware

Description

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback.
Affected Spring Products and Versions:
Spring Tools for Eclipse: 5.2.0 and earlier

Affected products

VendorProductAffectedFixed
Spring Spring Tools for Eclipse ≤ 5.2.0 —

References