Описание
A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat build of Quarkus | io.quarkus/quarkus-undertow | Not affected | ||
| Red Hat Data Grid 8 | undertow | Will not fix | ||
| Red Hat Decision Manager 7 | undertow | Out of support scope | ||
| Red Hat Fuse 7 | undertow | Out of support scope | ||
| Red Hat JBoss Data Grid 7 | undertow | Out of support scope | ||
| Red Hat JBoss Fuse 6 | undertow | Out of support scope | ||
| Red Hat Process Automation 7 | undertow | Out of support scope | ||
| Red Hat Single Sign-On 7 | undertow | Out of support scope | ||
| Red Hat JBoss Enterprise Application Platform 7 | Fixed | RHSA-2024:1677 | 04.04.2024 | |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | eap7-activemq-artemis | Fixed | RHSA-2024:1675 | 04.04.2024 |
Показывать по
Дополнительная информация
Статус:
5.3 Medium
CVSS3
Связанные уязвимости
A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.
A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.
A path traversal vulnerability was found in Undertow. This issue may a ...
5.3 Medium
CVSS3