CVE-2019-10184
EUVD-2019-064225.07.2019, 21:15
undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | undertow | 𝑥 < 2.0.23 |
| redhat | jboss_data_grid | - |
| redhat | jboss_enterprise_application_platform | - |
| redhat | jboss_enterprise_application_platform | 7.0.0 |
| redhat | openshift_application_runtimes | - |
| redhat | openshift_application_runtimes | 1.0 |
| redhat | single_sign-on | - |
| redhat | single_sign-on | 7.0 |
| redhat | jboss_enterprise_application_platform | 7.2 |
| redhat | jboss_enterprise_application_platform | 7.3 |
| redhat | jboss_enterprise_application_platform | 7.4 |
| redhat | jboss_enterprise_application_platform | 7.2 |
| redhat | jboss_enterprise_application_platform | 7.3 |
| redhat | jboss_enterprise_application_platform | 7.4 |
| redhat | jboss_enterprise_application_platform | 7.2 |
| redhat | jboss_enterprise_application_platform | 7.3 |
| redhat | single_sign-on | 7.3 |
| redhat | single_sign-on | 7.3 |
| redhat | single_sign-on | 7.3 |
| netapp | active_iq_unified_manager | - |
| netapp | active_iq_unified_manager | - |
| netapp | active_iq_unified_manager | - |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| undertow |
|
Common Weakness Enumeration
References