Описание
Inconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP
Red Hat JBoss EAP version 3.0.7.Final until 3.0.25.Final, 3.5.0.CR1, and 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2017-7561
- https://access.redhat.com/errata/RHSA-2018:0002
- https://access.redhat.com/errata/RHSA-2018:0003
- https://access.redhat.com/errata/RHSA-2018:0004
- https://access.redhat.com/errata/RHSA-2018:0005
- https://access.redhat.com/errata/RHSA-2018:0478
- https://access.redhat.com/errata/RHSA-2018:0479
- https://access.redhat.com/errata/RHSA-2018:0480
- https://access.redhat.com/errata/RHSA-2018:0481
- https://issues.jboss.org/browse/RESTEASY-1704
Пакеты
org.jboss.resteasy:resteasy-jaxrs
>= 3.0.7.Final, <= 3.0.24.Final
3.0.25.Final
org.jboss.resteasy:resteasy-jaxrs
= 3.1.4.Final
3.5.0.CR1
Связанные уязвимости
Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerab ...
Уязвимость платформы JBoss, связанная с непоследовательной интерпретацией http-запросов, позволяющая нарушителю нарушить целостность данных