CVE-2016-6311

Опубликовано: 03 июл. 2016

Источник: redhat

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers.

It was found that when issuing a GET request which results in a 302 redirect, and when the request header 'Host' field was not set, the response header field 'Location' contains the internal IP address of the server. An attacker could use this disclose information which they are not authorized to access.

Меры по смягчению последствий

You can add a filter in the JBoss CLI that sets the host header to the 'myvirtualhost.com' if the host header is not present. eg: /subsystem=undertow/configuration=filter/expression-filter=hostname:add(expression="header(header=Host, value=myvirtualhost.com)") /subsystem=undertow/server=default-server/host=default-host/filter-ref=hostname:add(predicate="not exists(%{i,Host})")

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat JBoss Fuse 6	hawtio	Not affected
Red Hat JBoss EAP 7		Fixed	RHSA-2017:3456	13.12.2017
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6	eap7-activemq-artemis	Fixed	RHSA-2017:3454	13.12.2017
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6	eap7-antlr	Fixed	RHSA-2017:3454	13.12.2017
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6	eap7-apache-commons-beanutils	Fixed	RHSA-2017:3454	13.12.2017
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6	eap7-apache-commons-cli	Fixed	RHSA-2017:3454	13.12.2017
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6	eap7-apache-commons-io	Fixed	RHSA-2017:3454	13.12.2017
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6	eap7-apache-cxf	Fixed	RHSA-2017:3454	13.12.2017
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6	eap7-apache-cxf-xjc-utils	Fixed	RHSA-2017:3454	13.12.2017
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6	eap7-apache-mime4j	Fixed	RHSA-2017:3454	13.12.2017

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-200

https://bugzilla.redhat.com/show_bug.cgi?id=1362735EAP7: Internal IP address disclosed on redirect when request header Host field is not set

EPSS

Процентиль: 72%

0.00725

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Связанные уязвимости

CVE-2016-6311

CVSS3: 5.3

nvd

больше 8 лет назад

Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers.

GHSA-p2j3-7ppx-vcp7

CVSS3: 5.3

github

больше 3 лет назад

Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers.

EPSS

Процентиль: 72%

0.00725

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2