VDB
BDU%3A2024-08709
BDU%3A2024-08709
PUBLISHED
CVSS 5 MEDIUM
Уязвимость библиотеки клиентского модуля Apache HttpClient средства Apache HttpComponents, позволяющая нарушителю подменить SSL-серверы
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Canonical Ltd., Сообщество свободного программного обеспечения, IBM Corp., Apache Software Foundation | Red Hat Enterprise Virtualization, Ubuntu, Red Hat Satellite, Jboss Operations Network, Jboss Fuse Service Works, Red Hat JBoss Data Virtualization, Debian GNU/Linux, Red Hat OpenShift Enterprise, Red Hat JBoss Data Grid, JBoss Enterprise Application Platform, Red Hat JBoss Enterprise Application Platform, IBM Storwize V5000, HttpClient, Red Hat Jboss Enterprise Web Platform, Red Hat Developer Toolset, Red Hat JBoss BPMS, Jboss Portal, Red Hat JBoss SOA Platform, Red Hat JBoss Web Framework Kit, Red Hat JBoss Web Platform, RHEV Manager, Jboss BRMS, Red Hat JBoss Enterprise Web Server, Jboss SOA Platform |
Timeline
- Oct 29, 2024 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory