CVE-2022-1259

Published: Aug 31, 2022Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.

Affected (14)

Products: Redhat: Build Of Quarkus, Integration Camel K, Jboss Enterprise Application Platform, Openshift Application Runtimes, Single Sign On, Undertow · Netapp: Active Iq Unified Manager, Cloud Secure Agent, Oncommand Insight, Oncommand Workflow Automation

Redhat

6 products

Build Of Quarkus

Integration Camel K

Jboss Enterprise Application Platform

Openshift Application Runtimes

Single Sign On

Undertow

Netapp

4 products

Active Iq Unified Manager

Cloud Secure Agent

Oncommand Insight

Oncommand Workflow Automation

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Build Of Quarkus	All versions
Redhat Integration Camel K	All versions
Redhat Jboss Enterprise Application Platform	Version 7.0.0
Redhat Openshift Application Runtimes	All versions
Redhat Single Sign On	Version 7.0
Redhat Undertow	Up to 2.2.17
Redhat Undertow	Version 2.2.18
Redhat Undertow	Version 2.2.19

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Cloud Secure Agent	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Workflow Automation	All versions