CVE-2019-10184

Description (CNA)

undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.

Affected (CNA)

CWE

CWE-862

References

• https://access.redhat.com/errata/RHSA-2019:2937
• https://access.redhat.com/errata/RHSA-2019:2935
• https://access.redhat.com/errata/RHSA-2019:2936
• https://access.redhat.com/errata/RHSA-2019:2938
• https://access.redhat.com/errata/RHSA-2019:2998
• https://access.redhat.com/errata/RHSA-2019:3044
• https://access.redhat.com/errata/RHSA-2019:3045
• https://access.redhat.com/errata/RHSA-2019:3050
• https://access.redhat.com/errata/RHSA-2019:3046
• https://access.redhat.com/errata/RHSA-2020:0727
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10184
• https://github.com/undertow-io/undertow/pull/794
• https://security.netapp.com/advisory/ntap-20220210-0016/

ADP enrichment