Authorization Bypass

2020-05-1303:23:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

27.7%

JSON

undertow is vulnerable to authorization bypass. The vulnerability exists in servletPath in normalized incorrectly leading to dangerous application mapping which could result in security bypass.

CPENameOperatorVersion
eap7-wildfly-transaction-clienteq1.1.4__1.Final_redhat_00001.1.el7eap
eap7-wildfly-transaction-clienteq1.1.2__1.Final_redhat_1.1.el7eap
eap7-wildfly-transaction-clienteq1.1.3__1.Final_redhat_00001.1.el7eap
eap7-wildfly-transaction-clienteq1.1.10__1.Final_redhat_00001.1.el8eap
eap7-wildfly-transaction-clienteq1.1.6__2.Final_redhat_00001.1.el8eap
eap7-wildfly-transaction-clienteq1.0.2__1.Final_redhat_1.1.ep7.el6
eap7-wildfly-transaction-clienteq1.1.4__1.Final_redhat_00001.1.el8eap
eap7-wildfly-transaction-clienteq1.1.2__1.Final_redhat_1.1.el6eap
eap7-wildfly-transaction-clienteq1.1.6__2.Final_redhat_00001.1.el6eap
eap7-wildfly-transaction-clienteq1.0.4__1.Final_redhat_1.1.ep7.el7

Name	Operator	Version
eap7-wildfly-transaction-client	eq	1.1.4__1.Final_redhat_00001.1.el7eap
eap7-wildfly-transaction-client	eq	1.1.2__1.Final_redhat_1.1.el7eap
eap7-wildfly-transaction-client	eq	1.1.3__1.Final_redhat_00001.1.el7eap
eap7-wildfly-transaction-client	eq	1.1.10__1.Final_redhat_00001.1.el8eap
eap7-wildfly-transaction-client	eq	1.1.6__2.Final_redhat_00001.1.el8eap
eap7-wildfly-transaction-client	eq	1.0.2__1.Final_redhat_1.1.ep7.el6
eap7-wildfly-transaction-client	eq	1.1.4__1.Final_redhat_00001.1.el8eap
eap7-wildfly-transaction-client	eq	1.1.2__1.Final_redhat_1.1.el6eap
eap7-wildfly-transaction-client	eq	1.1.6__2.Final_redhat_00001.1.el6eap
eap7-wildfly-transaction-client	eq	1.0.4__1.Final_redhat_1.1.ep7.el7