Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat integration camel for spring boot - vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
7.5
CVSSv3
CVE-2023-1108
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
Redhat Decision Manager 7.0Redhat Single Sign-on -Redhat Process Automation 7.0Redhat Openstack Platform 13.0Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Build Of Quarkus -Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Fuse 1.0.0Redhat UndertowRedhat Openshift Container Platform 4.11Redhat Openshift Container Platform 4.12Redhat Openshift Container Platform For Linuxone 4.9Redhat Openshift Container Platform For Linuxone 4.10Redhat Openshift Container Platform For Power 4.9Redhat Openshift Container Platform For Power 4.10Redhat Jboss Enterprise Application Platform 7.4Redhat Single Sign-on 7.6Netapp Oncommand Workflow Automation -
7.5
CVSSv3
CVE-2022-4492
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.
Redhat Jboss Enterprise Application Platform 7.0.0Redhat Single Sign-on 7.0Redhat Jboss Fuse 7.0.0Redhat Build Of Quarkus -Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Undertow 2.7.0Redhat Integration Camel For Spring Boot -Redhat Migration Toolkit For Applications 6.0Redhat Migration Toolkit For Runtimes -
7.5
CVSSv3
CVE-2022-1259
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
Redhat Jboss Enterprise Application Platform 7.0.0Redhat Single Sign-on 7.0Redhat Openshift Application Runtimes -Redhat Build Of Quarkus -Redhat Integration Camel K -Redhat UndertowRedhat Undertow 2.2.18Redhat Undertow 2.2.19Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -Netapp Cloud Secure Agent -
6.7
CVSSv3
CVE-2021-4178
A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged malicious user to supply malicious YAML.
Redhat Fabric8-kubernetesRedhat Fabric8-kubernetes 5.8.0Redhat Fabric8-kubernetes 5.0.0Redhat Process Automation 7.0Redhat Openshift Application Runtimes -Redhat Descision Manager 7.0Redhat Integration Camel K -Redhat A-mq Streams 2.0.1Redhat Fuse 7.11Redhat Integration Camel Quarkus 2.2.1Redhat Build Of Quarkus 2.2.5
5.9
CVSSv3
CVE-2021-3629
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions before...
Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Wildfly CoreRedhat Integration -Redhat UndertowRedhat Jboss Enterprise Application Platform 7.4Redhat Jboss Enterprise Application Platform 7.3Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -
5.3
CVSSv3
CVE-2021-3642
A flaw was found in Wildfly Elytron in versions before 1.10.14.Final, before 1.15.5.Final and before 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.
Redhat Wildfly ElytronRedhat Build Of Quarkus -Redhat Codeready Studio 12.0Redhat Data Grid 8.0Redhat Descision Manager 7.0Redhat Integration Camel K -Redhat Integration Camel QuarkusRedhat Jboss Enterprise Application Platform 7.0.0Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Jboss Fuse 7.0.0Redhat Openshift Application Runtimes -Redhat Process Automation 7.0Quarkus Quarkus
5.3
CVSSv3
CVE-2021-20289
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's pa...
Redhat ResteasyNetapp Oncommand Insight -Quarkus QuarkusOracle Communications Cloud Native Core Console 1.9.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook