CVE-2023-4639 Undertow: cookie smuggling/spoofing
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
Problem types: cwe_id: CWE-444
description: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products: vendor: Red Hat
product: Migration Toolkit for Runtimes 1 on RHEL 8
cpes: cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8
default_status: affected
vendor: Red Hat
product: Migration Toolkit for Runtimes 1 on RHEL 8
cpes: cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8
default_status: affected
vendor: Red Hat
product: Migration Toolkit for Runtimes 1 on RHEL 8
cpes: cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8
default_status: affected
vendor: Red Hat
product: Migration Toolkit for Runtimes 1 on RHEL 8
cpes: cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8
default_status: affected
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 7
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:7.4
default_status: unaffected
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8
default_status: affected
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9
default_status: affected
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7
default_status: affected
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 8
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:8.0
default_status: unaffected
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9
default_status: affected
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9
default_status: affected
vendor: Red Hat
product: Migration Toolkit for Applications 6
cpes: cpe:/a:redhat:migration_toolkit_applications:6
default_status: affected
vendor: Red Hat
product: Red Hat build of Apache Camel for Spring Boot 3
cpes: cpe:/a:redhat:camel_spring_boot:3
default_status: unaffected
vendor: Red Hat
product: Red Hat build of Apicurio Registry
cpes: cpe:/a:redhat:service_registry:2
default_status: unknown
vendor: Red Hat
product: Red Hat build of Quarkus
cpes: cpe:/a:redhat:quarkus:2
default_status: unknown
vendor: Red Hat
product: Red Hat Data Grid 8
cpes: cpe:/a:redhat:jboss_data_grid:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Decision Manager 7
cpes: cpe:/a:redhat:jboss_enterprise_brms_platform:7
default_status: unknown
vendor: Red Hat
product: Red Hat Fuse 7
cpes: cpe:/a:redhat:jboss_fuse:7
default_status: unknown
vendor: Red Hat
product: Red Hat Integration Camel K
cpes: cpe:/a:redhat:integration:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Integration Camel Quarkus
cpes: cpe:/a:redhat:camel_quarkus:2
default_status: unaffected
vendor: Red Hat
product: Red Hat Integration Change Data Capture
cpes: cpe:/a:redhat:integration:1
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Data Grid 7
cpes: cpe:/a:redhat:jboss_data_grid:7
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Enterprise Application Platform 6
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:6
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Fuse 6
cpes: cpe:/a:redhat:jboss_fuse:6
default_status: unknown
vendor: Red Hat
product: Red Hat JBoss Fuse Service Works 6
cpes: cpe:/a:redhat:jboss_fuse_service_works:6
default_status: unknown
vendor: Red Hat
product: Red Hat Process Automation 7
cpes: cpe:/a:redhat:jboss_enterprise_bpms_platform:7
default_status: unknown
vendor: Red Hat
product: Red Hat Single Sign-On 7
cpes: cpe:/a:redhat:red_hat_single_sign_on:7
default_status: unknown
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Red Hat would like to thank Ankur Sundara for reporting this issue.
Published: 2024-11-17T10:21:44.539Z