Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse
# Withdrawn Advisory This advisory has been withdrawn because it was determined to not be a valid vulnerability. This link is maintained to preserve external references. For more information, see https://nvd.nist.gov/vuln/detail/CVE-2024-4109. # Original Description A flaw was found in Undertow. An HTTP request header value from a previous stream may be incorrectly reused for a request associated with a subsequent stream on the same HTTP/2 connection. This issue can potentially lead to information leakage between requests.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-4109US | — | — | ||
Rejected reason: Red Hat Product Security has determined that this CVE is not a security vulnerability. | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2024:10927WEB
- https://access.redhat.com/errata/RHSA-2024:10928WEB
- https://access.redhat.com/errata/RHSA-2024:10929WEB
- https://access.redhat.com/errata/RHSA-2024:10933WEB
- https://access.redhat.com/errata/RHSA-2024:11559WEB
- https://access.redhat.com/errata/RHSA-2024:11560WEB
- https://access.redhat.com/errata/RHSA-2024:11570WEB
- https://access.redhat.com/security/cve/CVE-2024-4109WEB
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan