7.5

CVE-2019-10184

undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Undertow Version < 2.0.23
Redhat ≫ Jboss Data Grid Version - SwEdition text-only
Redhat ≫ Jboss Enterprise Application Platform Version - SwEdition text-only
Redhat ≫ Openshift Application Runtimes Version - SwEdition text-only
Redhat ≫ Single Sign-on Version - SwEdition text-only
Redhat ≫ Single Sign-on Version 7.0
Redhat ≫ Single Sign-on Version 7.3
   Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Single Sign-on Version 7.3
   Redhat ≫ Enterprise Linux Version 7.0
Redhat ≫ Single Sign-on Version 7.3
   Redhat ≫ Enterprise Linux Version 6.0
Netapp ≫ Active Iq Unified Manager Version - SwPlatform linux
Netapp ≫ Active Iq Unified Manager Version - SwPlatform vmware_vsphere
Netapp ≫ Active Iq Unified Manager Version - SwPlatform windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.48% 0.876
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://access.redhat.com/errata/RHSA-2020:0727
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:2998
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:2935
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:2936
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:2937
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:2938
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:3044
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:3045
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:3046
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:3050
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10184
Vendor Advisory
Issue Tracking
https://github.com/undertow-io/undertow/pull/794
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220210-0016/
Third Party Advisory