Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse
# Withdrawn Advisory This advisory has been withdrawn because it was determined to not be a valid vulnerability. This link is maintained to preserve external references. For more information, see https://nvd.nist.gov/vuln/detail/CVE-2024-4109. # Original Description A flaw was found in Undertow. An HTTP request header value from a previous stream may be incorrectly reused for a request associated with a subsequent stream on the same HTTP/2 connection. This issue can potentially lead to information leakage between requests.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-4109US | — | — | ||
Rejected reason: Red Hat Product Security has determined that this CVE is not a security vulnerability. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2024:10927WEB
- https://access.redhat.com/errata/RHSA-2024:10928WEB
- https://access.redhat.com/errata/RHSA-2024:10929WEB
- https://access.redhat.com/errata/RHSA-2024:10933WEB
- https://access.redhat.com/errata/RHSA-2024:11559WEB
- https://access.redhat.com/errata/RHSA-2024:11560WEB
- https://access.redhat.com/errata/RHSA-2024:11570WEB
- https://access.redhat.com/security/cve/CVE-2024-4109WEB
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan