Lucene search
GoogleOSV:GHSA-VF6R-MMHC-3XCMHistoryMay 13, 2022 - 1:12 a.m.
Exposure of Sensitive Information to an Unauthorized Actor in Undertow
2022-05-1301:12:21
Google
osv.dev
17
undertow
information leak vulnerability
sensitive information
EPSS
0.003
Percentile
70.5%
An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.
References
access.redhat.com/errata/RHSA-2019:0362
access.redhat.com/errata/RHSA-2019:0364
access.redhat.com/errata/RHSA-2019:0365
access.redhat.com/errata/RHSA-2019:0380
access.redhat.com/errata/RHSA-2019:1106
access.redhat.com/errata/RHSA-2019:1107
access.redhat.com/errata/RHSA-2019:1108
access.redhat.com/errata/RHSA-2019:1140
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14642
nvd.nist.gov/vuln/detail/CVE-2018-14642
Related
ubuntucve
ubuntucve
CVE-2018-14642
2018-09-18 00:00:00
veracode
veracode
Information Disclosure
2018-09-19 06:46:19
debiancve
debiancve
CVE-2018-14642
2018-09-18 13:29:00
prion
prion
Information disclosure
2018-09-18 13:29:00
cve
cve
CVE-2018-14642
2018-09-18 13:29:00
redhatcve
redhatcve
CVE-2018-14642
2018-09-18 06:19:00
cvelist
cvelist
CVE-2018-14642
2018-09-18 13:00:00
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Undertow
2022-05-13 01:12:21
nvd
nvd
CVE-2018-14642
2018-09-18 13:29:00
redhat
redhat
nessus
nessus
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.1.6 for RHEL 7 (RHSA-2019:0365)
2019-02-20 00:00:00
RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.1.6 on RHEL 6 (RHSA-2019:0364)
2019-02-20 00:00:00
RHEL 7 : JBoss EAP (RHSA-2019:1108)
2019-05-13 00:00:00