Undertow Missing Authorization when requesting a protected directory without trailing slash
undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-10184US | high7.5OT erhöht | — | ||
undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes vi… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2019:2935WEB
- https://access.redhat.com/errata/RHSA-2019:2936WEB
- https://access.redhat.com/errata/RHSA-2019:2937WEB
- https://access.redhat.com/errata/RHSA-2019:2938WEB
- https://access.redhat.com/errata/RHSA-2019:2998WEB
- https://access.redhat.com/errata/RHSA-2019:3044WEB
- https://access.redhat.com/errata/RHSA-2019:3045WEB
- https://access.redhat.com/errata/RHSA-2019:3046WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan