CVE-2021-3629

Published: May 24, 2022Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

Affected (13)

Products: Redhat: Integration, Jboss Enterprise Application Platform, Single Sign On, Undertow, Wildfly Core · Netapp: Active Iq Unified Manager, Oncommand Insight, Oncommand Workflow Automation

Redhat

5 products

Integration

Jboss Enterprise Application Platform

3 products

Active Iq Unified Manager

Oncommand Insight

Oncommand Workflow Automation

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Integration	All versions
Redhat Jboss Enterprise Application Platform	All versions
Redhat Single Sign On	All versions
Redhat Undertow	Before 2.0.40
Redhat Undertow	From 2.2.0 to 2.2.11
Redhat Wildfly Core	Before 17.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Version 7.4

Configuration C

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Version 7.3

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Workflow Automation	All versions