Aller au contenu
en Se connecter
7.5 Élevée

CVE-2024-6162 A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on…

Description

A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on the AJP listener. This issue arises because the same buffer is used to decode the paths for multiple requests simultaneously, leading to incorrect path information being processed. As a result, the server may attempt to access the wrong path, causing errors such as "404 Not Found" or other application failures. This flaw can potentially lead to a denial of service, as legitimate resources become inaccessible due to the path mix-up.

Produits et versions touchés

Produit Versions touchées Corrigé en
EAP 8.0.1 Versions non publiées
Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2 Versions non publiées
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions non publiées
Red Hat build of Apache Camel for Spring Boot 3 Versions non publiées
Red Hat build of Apache Camel - HawtIO 4 Versions non publiées
Red Hat Build of Keycloak Versions non publiées
Red Hat Data Grid 8 Versions non publiées
Red Hat Fuse 7 Versions non publiées
Red Hat Integration Camel K 1 Versions non publiées
Afficher les 5 autres branches
Produit Versions touchées Corrigé en
Red Hat JBoss Data Grid 7 Versions non publiées
Red Hat JBoss Enterprise Application Platform 7 Versions non publiées
Red Hat JBoss Enterprise Application Platform 8 Versions non publiées
Red Hat Process Automation 7 Versions non publiées
Red Hat Single Sign-On 7 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification
Suivre cette CVE