← Back

CVE-2019-10184

nvd nist
Published: Jul 25, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.

Affected (15)

Redhat
5 products
Undertow
Jboss Data Grid
Jboss Enterprise Application Platform
Openshift Application Runtimes
Single Sign On
Netapp
1 product
Active Iq Unified Manager
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Undertow
Before 2.0.23
Configuration B
7 vulnerable
Vulnerable SoftwareAffected Versions
Jboss Data Grid
All versions
Redhat
Jboss Enterprise Application Platform
All versions
Jboss Enterprise Application Platform
Version 7.0.0
Redhat
Openshift Application Runtimes
All versions
Openshift Application Runtimes
Version 1.0
Redhat
Single Sign On
All versions
Single Sign On
Version 7.0
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Jboss Enterprise Application Platform
Version 7.4
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Jboss Enterprise Application Platform
Version 7.2
Jboss Enterprise Application Platform
Version 7.3
Configuration F
1 platform
Running on/withPlatform Versions
Redhat
Enterprise Linux
Version 8.0
Configuration G
1 platform
Running on/withPlatform Versions
Redhat
Enterprise Linux
Version 7.0
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Single Sign On
Version 7.3
Running on/withPlatform Versions
Redhat
Enterprise Linux
Version 6.0
Configuration I
3 vulnerable
Vulnerable SoftwareAffected Versions
Netapp
Active Iq Unified Manager
All versions
Active Iq Unified Manager
All versions
Active Iq Unified Manager
All versions

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (26)

Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Issue TrackingVendor Advisory
Source: secalert@redhat.com
PatchThird Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.