Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-1459

Undertow: directory traversal vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

undertow

Default version status: unaffected

  • 0 to < 2.3.12affected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:2.16.0-18.redhat_00052.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:3.4.10-2.redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:5.13.3.202401111512-1.r_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:1.9.4-1.Final_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:3.3.21-1.Final_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:5.3.36-1.Final_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:11.0.18-2.Final_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:1.1.2-1.redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:1.3.9-3.SP3_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:2.0.1-3.Final_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:1.1.2-1.redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:5.0.27-4.SP2_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:1.10.0-35.Final_redhat_00034.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:3.8.12-1.SP2_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:1.0.17-1.Final_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:5.5.5-6.redhat_2.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:2.2.30-1.SP1_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:7.4.16-4.GA_redhat_00002.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Default version status: affected

  • 0:1.15.22-1.Final_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:2.16.0-18.redhat_00052.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:3.4.10-2.redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:5.13.3.202401111512-1.r_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:1.9.4-1.Final_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:3.3.21-1.Final_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:5.3.36-1.Final_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:11.0.18-2.Final_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:1.1.2-1.redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:1.3.9-3.SP3_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:2.0.1-3.Final_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:1.1.2-1.redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:5.0.27-4.SP2_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:1.10.0-35.Final_redhat_00034.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:3.8.12-1.SP2_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:1.0.17-1.Final_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:5.5.5-6.redhat_2.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:2.2.30-1.SP1_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:7.4.16-4.GA_redhat_00002.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Default version status: affected

  • 0:1.15.22-1.Final_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:2.16.0-18.redhat_00052.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:3.4.10-2.redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:5.13.3.202401111512-1.r_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:1.9.4-1.Final_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:3.3.21-1.Final_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:5.3.36-1.Final_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:11.0.18-2.Final_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:1.1.2-1.redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:1.3.9-3.SP3_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:2.0.1-3.Final_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:1.1.2-1.redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:5.0.27-4.SP2_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:1.10.0-35.Final_redhat_00034.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:3.8.12-1.SP2_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:1.0.17-1.Final_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:5.5.5-6.redhat_2.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:2.2.30-1.SP1_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:7.4.16-4.GA_redhat_00002.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Default version status: affected

  • 0:1.15.22-1.Final_redhat_00001.1.el7eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Default version status: affected

  • 0:2.3.11-1.SP1_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Default version status: affected

  • 0:2.3.11-1.SP1_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat build of Quarkus

Default version status: unaffected

Red Hat Red Hat Data Grid 8

Default version status: affected

Red Hat Red Hat Decision Manager 7

Default version status: unknown

Red Hat Red Hat Fuse 7

Default version status: unknown

Red Hat Red Hat JBoss Data Grid 7

Default version status: unknown

Red Hat Red Hat JBoss Fuse 6

Default version status: unknown

Red Hat Red Hat Process Automation 7

Default version status: unknown

Red Hat Red Hat Single Sign-On 7

Default version status: unknown

References