Privilege Escalation

2020-05-1303:23:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

38.9%

JSON

undertow is vulnerable to privilege escalation. The vulnerability exists through invalid HTTP request with large chunk size.

CPENameOperatorVersion
eap7-weld-cdi-2.0-apieq2.0.0__3.SP1_redhat_00001.1.el6eap
eap7-weld-cdi-2.0-apieq2.0.0__3.SP1_redhat_00001.1.el8eap
eap7-weld-cdi-2.0-apieq2.0.0__3.SP1_redhat_00001.1.el7eap
eap7-smallrye-configeq1.3.4__1.redhat_00001.1.el8eap
eap7-smallrye-configeq1.3.6__1.SP01_redhat_00001.1.el8eap
eap7-smallrye-configeq1.3.4__1.redhat_00001.1.el6eap
eap7-smallrye-configeq1.3.6__1.redhat_00001.1.el7eap
eap7-smallrye-configeq1.3.4__1.redhat_00001.1.el7eap
eap7-jboss-threadseq2.2.1__1.Final_redhat_1.1.ep7.el7
eap7-jboss-threadseq2.3.2__2.Final_redhat_1.1.el8eap

Name	Operator	Version
eap7-weld-cdi-2.0-api	eq	2.0.0__3.SP1_redhat_00001.1.el6eap
eap7-weld-cdi-2.0-api	eq	2.0.0__3.SP1_redhat_00001.1.el8eap
eap7-weld-cdi-2.0-api	eq	2.0.0__3.SP1_redhat_00001.1.el7eap
eap7-smallrye-config	eq	1.3.4__1.redhat_00001.1.el8eap
eap7-smallrye-config	eq	1.3.6__1.SP01_redhat_00001.1.el8eap
eap7-smallrye-config	eq	1.3.4__1.redhat_00001.1.el6eap
eap7-smallrye-config	eq	1.3.6__1.redhat_00001.1.el7eap
eap7-smallrye-config	eq	1.3.4__1.redhat_00001.1.el7eap
eap7-jboss-threads	eq	2.2.1__1.Final_redhat_1.1.ep7.el7
eap7-jboss-threads	eq	2.3.2__2.Final_redhat_1.1.el8eap