Access Restriction Bypass

2018-10-2901:59:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

65.3%

JSON

gateway.transport.http is vulnerable to access restriction bypass. Access restriction controls can be bypassed due to improper HTTP request handling via a specially crafted HTTP request, allowing a remote attacker to obtain confidential information.

CPENameOperatorVersion
http transportle5.6.0-RC003
http transportle1.0.5
http transportle5.2.5
kaazing websocket gateway - serverle5.5.0

Name	Operator	Version
http transport	le	5.6.0-RC003
http transport	le	1.0.5
http transport	le	5.2.5
kaazing websocket gateway - server	le	5.5.0

References

github.com/kaazing/gateway/commit/5e29765de6f5c61f82cee0e039fe41b8062f19fb

support.kaazing.com/hc/en-us/articles/115004752368

0.003 Low

EPSS

Percentile

65.3%

JSON

Related for VERACODE:7650