Get ahead
VMware offers training and certification to turbo-charge your progress.
Learn moreUnless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1/CIFS, which lacks mandatory signing/encryption and is vulnerable to NTLM relay and content-tampering MITM.
An on-path attacker can downgrade the dialect, intercept or alter files moved by the SMB adapters, or capture NTLM credentials.
Spring Integration:
| Fix version | Availability |
|---|---|
| 7.1.0.1 | Enterprise Support Only |
| 7.1.1 | OSS |
| 7.0.5.1 | Enterprise Support Only |
| 7.0.6 | OSS |
| 6.5.11 | Enterprise Support Only |
| 6.4.13 | Enterprise Support Only |
No further mitigation steps are necessary.
To report a security vulnerability for a project within the Spring portfolio, see the Security Policy