VDB
RHSA-2024%3A3920
RHSA-2024%3A3920
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in Axios that may expose a confidential session token. This issue can allow a remote attacker to bypass security measures and view sensitive data.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Migration Toolkit for Runtimes 1 on RHEL 8 |
Timeline
- Jun 13, 2024 CVE Published
- Apr 24, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:3920 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=migration.toolkit.runtimes&downloadType=distributions advisory
- https://issues.redhat.com/browse/WINDUPRULE-1049 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3920.json advisory
- https://access.redhat.com/security/cve/CVE-2023-45857 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2248979 issue
- https://www.cve.org/CVERecord?id=CVE-2023-45857 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45857 advisory
- https://access.redhat.com/security/cve/CVE-2024-28849 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2269576 issue
- https://www.cve.org/CVERecord?id=CVE-2024-28849 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-28849 advisory
- https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp advisory
- https://access.redhat.com/security/cve/CVE-2024-29131 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2270674 issue
- https://www.cve.org/CVERecord?id=CVE-2024-29131 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-29131 advisory
- https://github.com/apache/commons-configuration/commit/56b5c4dcdffbde27870df5a3105d6a5f9b22f554 advisory
- https://github.com/apache/commons-configuration/commit/7d7d399d0598cb0ca5f81891de34694178156dab advisory
…and 12 more