VDB

BDU%3A2024-01315

BDU%3A2024-01315 PUBLISHED CVSS 7.400000095367432 HIGH

Уязвимость веб-сервера Undertow, связанная с недостатками обработки входящих HTTP-запросов, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации

Risk Scores

CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red HatMigration Toolkit for Runtimes 1 on RHEL 81.2-23
Red HatRed Hat Data Grid 8
Red HatRed Hat JBoss Enterprise Application Platform 7.4 for RHEL 80:2.2.30-1.SP1_redhat_00001.1.el8eap
Red HatRed Hat build of Quarkus
Red HatRed Hat JBoss Enterprise Application Platform 6
Red HatRed Hat JBoss Enterprise Application Platform 8
Red HatRed Hat Decision Manager 7
Red HatRed Hat JBoss Enterprise Application Platform 7.4 on RHEL 70:2.2.30-1.SP1_redhat_00001.1.el7eap
Red HatRed Hat Single Sign-On 7
Red HatRed Hat JBoss Enterprise Application Platform 7
Red HatMigration Toolkit for Runtimes 1 on RHEL 81.2-14
Red HatRed Hat JBoss Fuse Service Works 6
Red HatRed Hat Integration Change Data Capture
Red HatRed Hat Integration Camel Quarkus
Red HatMigration Toolkit for Runtimes 1 on RHEL 81.2-15
Red HatRed Hat JBoss Enterprise Application Platform 7.4 for RHEL 90:2.2.30-1.SP1_redhat_00001.1.el9eap
Red Hat Inc.Migration Toolkit for Applications, Migration Toolkit for Runtimes, undertow
Red HatMigration Toolkit for Applications 6
Red HatRed Hat build of Apicurio Registry
Red HatRed Hat JBoss Fuse 6

…and 8 more

Timeline

  • Feb 9, 2024 PoC Published
  • Feb 15, 2024 CVE Published
  • Nov 17, 2024 PoC Published
  • Nov 17, 2024 PoC Published
  • May 17, 2026 Distribution Patch
  • May 17, 2026 Distribution Patch
  • May 17, 2026 Distribution Patch
  • May 17, 2026 Distribution Patch
  • May 17, 2026 Distribution Patch
  • May 17, 2026 Distribution Patch
  • May 17, 2026 Distribution Patch
  • May 17, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›