VDB

BDU%3A2024-08705

BDU%3A2024-08705 PUBLISHED CVSS 6.400000095367432 MEDIUM

Уязвимость клиентского модуля Apache HttpClient средства Apache HttpComponents, позволяющая нарушителю подменить SSL-серверы

Risk Scores

CVSS 2.0
6.400000095367432

Affected Products

VendorProductVersions
Red Hat Inc., Canonical Ltd., Novell Inc., Сообщество свободного программного обеспечения, IBM Corp., Apache Software FoundationRed Hat Enterprise Virtualization, Red Hat Enterprise Linux, Ubuntu, SUSE Linux Enterprise Server for SAP Applications, SUSE OpenStack Cloud, Red Hat Virtualization, SUSE Linux Enterprise Module for Basesystem, SUSE Enterprise Storage, SUSE Linux Enterprise Point of Sale, Suse Linux Enterprise Server, OpenSUSE Leap, SUSE OpenStack Cloud Crowbar, Red Hat Satellite, Jboss Operations Network, Red Hat Software Collections, SUSE Linux Enterprise High Performance Computing, openSUSE Tumbleweed, Red Hat Storage, Red Hat JBoss Data Virtualization, SUSE Manager Proxy, SUSE Manager Retail Branch Server, SUSE Manager Server, Debian GNU/Linux, Red Hat JBoss Fuse Service Works, Red Hat JBoss SOA Platform, Red Hat OpenShift Enterprise, Suse Linux Enterprise Desktop, Red Hat JBoss Data Grid, Red Hat OpenShift Container Platform, Red Hat JBoss Fuse, Red Hat JBoss Enterprise Application Platform, SUSE Liberty Linux, IBM Storwize V5000, Red Hat Jboss Enterprise Web Platform, Red Hat JBoss BPMS, Jboss Portal, Red Hat JBoss Web Framework Kit, Red Hat JBoss Web Platform, RHEV Manager, Red Hat JBoss Enterprise Web Server, HttpClient, HttpAsyncClient, Red Hat JBoss A-MQ

Timeline

  • Oct 29, 2024 CVE Published
  • Mar 19, 2026 Distribution Patch
  • Mar 19, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›