Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-1459
HistoryFeb 12, 2024 - 12:00 a.m.

CVE-2024-1459

2024-02-1200:00:00
ubuntu.com
ubuntu.com
15
undertow
path traversal
jboss eap
remote attacker
http request
privileged files
restricted directories

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

37.1%

A path traversal vulnerability was found in Undertow. This issue may allow
a remote attacker to append a specially-crafted sequence to an HTTP request
for an application deployed to JBoss EAP, which may permit access to
privileged or restricted files and directories.

Bugs

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

37.1%