{"schema_version":"1","data":[{"id":32292,"advisory_id":"8d39a01d-9016-4f6f-9d94-f2499a125313","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93432","source_published_at":"2026-09-18T17:53:19.772+00:00","published_at":"2026-10-25T08:47:02.512833+00:00","extraction_method":"structured","technologies":["core-cve","exploit-intelligence","red-hat-build-of-apache-camel-4-for-quarkus-3","red-hat-build-of-apicurio-registry-3","red-hat-build-of-keycloak","red-hat-build-of-quarkus","red-hat-build-of-quarkus-3-27-6-redhat","red-hat-build-of-quarkus-3-33-4-redhat","red-hat-fuse-7"],"cve_ids":["CVE-2026-93432"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus","summary":"A flaw was found in the Quarkus Qute template engine. When the {#eval} section helper processes a sub-template, it fails to pass the parent template's content type information. This bypasses standard escaping mechanisms, allowing untrusted data to be output as raw, unescaped text. This vulnerability can lead to Cross-Site Scripting (XSS) and JSON Injection, potentially allowing a remote attacker to execute arbitrary code in a user's browser or manipulate data.","evidence":"cve:CVE-2026-93432","products":[{"name":{"value":"Red Hat build of Quarkus 3.27.6.redhat","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus 3.33.4.redhat","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Exploit Intelligence","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel 4 for Quarkus 3","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel 4 for Quarkus 3","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apicurio Registry 3","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Build of Keycloak","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Build of Keycloak","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Fuse 7","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Fuse 7","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-93432","aliases":["CVE-2026-93432"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.1,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"cpes":["cpe:/a:redhat:quarkus:3.27::el8"],"vendor":"Red Hat","product":"Red Hat build of Quarkus 3.27.6.redhat","versions":[{"status":"unaffected","version":"3.27.6.redhat-00004","lessThan":"*","versionType":"rpm"}],"packageName":"io.quarkus.qute/qute-core","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:quarkus:3.33::el8"],"vendor":"Red Hat","product":"Red Hat build of Quarkus 3.33.4.redhat","versions":[{"status":"unaffected","version":"3.33.4.redhat-00004","lessThan":"*","versionType":"rpm"}],"packageName":"io.quarkus.qute/qute-core","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:exploit_intelligence:0"],"vendor":"Red Hat","product":"Exploit Intelligence","packageName":"exploit-intelligence/agent-client-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:camel_quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4 for Quarkus 3","packageName":"qute-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:camel_quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4 for Quarkus 3","packageName":"qute-generator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:apicurio_registry:3"],"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 3","packageName":"qute-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:build_keycloak:"],"vendor":"Red Hat","product":"Red Hat Build of Keycloak","packageName":"qute-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:build_keycloak:"],"vendor":"Red Hat","product":"Red Hat Build of Keycloak","packageName":"rhbk/keycloak-rhel9-operator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Quarkus","packageName":"qute-generator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_fuse:7"],"vendor":"Red Hat","product":"Red Hat Fuse 7","packageName":"qute-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_fuse:7"],"vendor":"Red Hat","product":"Red Hat Fuse 7","packageName":"qute-generator","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-15T23:41:36.020Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:83082","https://access.redhat.com/errata/RHSA-2026:83520","https://access.redhat.com/security/cve/CVE-2026-93432","https://bugzilla.redhat.com/show_bug.cgi?id=2536859"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-93432","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-18T19:48:06.603188Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-18T19:48:17.558Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-15T23:41:36.020Z"}}},"related_cves":[{"value":"CVE-2026-93432","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":22827,"advisory_id":"02beae68-5eee-4a5d-b950-b9469093ddb9","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-3884","source_published_at":"2025-12-03T18:40:25.606+00:00","published_at":"2026-10-25T06:07:59.457889+00:00","extraction_method":"structured","technologies":["core-cve","openshift-serverless","red-hat-build-of-apache-camel-4-for-quarkus-3","red-hat-build-of-apache-camel-for-spring-boot-3","red-hat-build-of-apache-camel-for-spring-boot-4","red-hat-build-of-apache-camel-hawtio-4","red-hat-build-of-apicurio-registry-2","red-hat-build-of-keycloak","red-hat-build-of-optaplanner-8","red-hat-build-of-quarkus","red-hat-data-grid-8","red-hat-fuse-7","red-hat-integration-camel-k-1","red-hat-integration-camel-quarkus-2","red-hat-jboss-data-grid-7","red-hat-jboss-enterprise-application-platform-7","red-hat-jboss-enterprise-application-platform-7-1-eus-for-rhel-7","red-hat-jboss-enterprise-application-platform-7-3-eus-for-rhel-7","red-hat-jboss-enterprise-application-platform-7-4-24","red-hat-jboss-enterprise-application-platform-7-4-els-on-rhel-7","red-hat-jboss-enterprise-application-platform-7-4-els-on-rhel-8","red-hat-jboss-enterprise-application-platform-7-4-els-on-rhel-9","red-hat-jboss-enterprise-application-platform-8-0","red-hat-jboss-enterprise-application-platform-8-0-for-rhel-8","red-hat-jboss-enterprise-application-platform-8-0-for-rhel-9","red-hat-jboss-enterprise-application-platform-8-1-3","red-hat-jboss-enterprise-application-platform-8-1-for-rhel-8","red-hat-jboss-enterprise-application-platform-8-1-for-rhel-9","red-hat-jboss-enterprise-application-platform-expansion-pack","red-hat-jboss-fuse-service-works-6","red-hat-process-automation-7","red-hat-single-sign-on-7","streams-for-apache-kafka"],"cve_ids":["CVE-2024-3884"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded","summary":"A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.","evidence":"cve:CVE-2024-3884","products":[{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4.24","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1.3","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"OpenShift Serverless","evidence":"/containers/cna/affected/49/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel 4 for Quarkus 3","evidence":"/containers/cna/affected/50/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel for Spring Boot 3","evidence":"/containers/cna/affected/51/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel for Spring Boot 4","evidence":"/containers/cna/affected/52/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel - HawtIO 4","evidence":"/containers/cna/affected/53/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apicurio Registry 2","evidence":"/containers/cna/affected/54/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Build of Keycloak","evidence":"/containers/cna/affected/55/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of OptaPlanner 8","evidence":"/containers/cna/affected/56/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus","evidence":"/containers/cna/affected/57/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus","evidence":"/containers/cna/affected/58/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Data Grid 8","evidence":"/containers/cna/affected/59/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Fuse 7","evidence":"/containers/cna/affected/60/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Integration Camel K 1","evidence":"/containers/cna/affected/61/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Integration Camel Quarkus 2","evidence":"/containers/cna/affected/62/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Data Grid 7","evidence":"/containers/cna/affected/63/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7","evidence":"/containers/cna/affected/64/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform Expansion Pack","evidence":"/containers/cna/affected/65/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Fuse Service Works 6","evidence":"/containers/cna/affected/66/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Process Automation 7","evidence":"/containers/cna/affected/67/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Single Sign-On 7","evidence":"/containers/cna/affected/68/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"streams for Apache Kafka","evidence":"/containers/cna/affected/69/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-3884","aliases":["CVE-2024-3884"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}}],"affected":[{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:1.4.18-19.SP17_redhat_00001.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:7.1.14-4.GA_redhat_00003.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.0.41-7.SP8_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:7.3.17-5.GA_redhat_00006.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4.24","versions":[{"status":"unaffected","version":"2.2.39.Final-redhat-00001","lessThan":"*","versionType":"rpm"}],"packageName":"io.undertow/undertow-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","versions":[{"status":"unaffected","version":"0:2.2.39-1.Final_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","versions":[{"status":"unaffected","version":"0:7.4.24-4.GA_redhat_00002.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","versions":[{"status":"unaffected","version":"0:2.2.39-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","versions":[{"status":"unaffected","version":"0:7.4.24-4.GA_redhat_00002.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","versions":[{"status":"unaffected","version":"0:2.2.39-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","versions":[{"status":"unaffected","version":"0:7.4.24-4.GA_redhat_00002.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:1.83.0-1.redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-bouncycastle","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:33.0.0-2.jre_redhat_00003.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-guava-libraries","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:4.0.6-1.redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-jaxb","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:1.0.0-3.redhat_00009.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-jcip-annotations","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:2.0.2-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-slf4j-jboss-logmanager","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:2.3.23-1.SP3_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:1.83.0-1.redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-bouncycastle","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:33.0.0-2.jre_redhat_00003.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-guava-libraries","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:4.0.6-1.redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-jaxb","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:1.0.0-3.redhat_00009.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-jcip-annotations","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:2.0.2-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-slf4j-jboss-logmanager","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:2.3.23-1.SP3_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1.3","versions":[{"status":"unaffected","version":"2.3.20.SP4-redhat-00001","lessThan":"*","versionType":"rpm"}],"packageName":"io.undertow/undertow-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:4.0.10-1.redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-apache-cxf","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:1.82.0-1.redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-bouncycastle","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:801.3.0-1.GA_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-eap-product-conf-parent","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:1.0.1-3.redhat_00003.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-eventstream","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:6.6.36-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-hibernate","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:4.0.2-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-jboss-el-api_5.0_spec","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:2.5.0-1.redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-jboss-threads","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:2.3.20-2.SP4_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:8.1.3-4.GA_redhat_00006.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:5.0.12-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly-clustering","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:2.6.6-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly-elytron","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","versions":[{"status":"unaffected","version":"0:8.1.1-4.GA_redhat_00007.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly-javadocs","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:4.0.10-1.redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-apache-cxf","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:1.82.0-1.redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-bouncycastle","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:801.3.0-1.GA_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-eap-product-conf-parent","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:1.0.1-3.redhat_00003.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-eventstream","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:6.6.36-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-hibernate","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:4.0.2-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-jboss-el-api_5.0_spec","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:2.5.0-1.redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-jboss-threads","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:2.3.20-2.SP4_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:8.1.3-4.GA_redhat_00006.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:5.0.12-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly-clustering","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:2.6.6-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly-elytron","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","versions":[{"status":"unaffected","version":"0:8.1.1-4.GA_redhat_00007.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly-javadocs","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:serverless:1"],"vendor":"Red Hat","product":"OpenShift Serverless","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:camel_quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4 for Quarkus 3","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:camel_spring_boot:3"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel for Spring Boot 3","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:camel_spring_boot:4"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel for Spring Boot 4","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:apache_camel_hawtio:4"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel - HawtIO 4","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:service_registry:2"],"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 2","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:build_keycloak:"],"vendor":"Red Hat","product":"Red Hat Build of Keycloak","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:optaplanner:::el6"],"vendor":"Red Hat","product":"Red Hat build of OptaPlanner 8","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:quarkus:2"],"vendor":"Red Hat","product":"Red Hat build of Quarkus","packageName":"quarkus-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Quarkus","packageName":"quarkus-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:jboss_data_grid:8"],"vendor":"Red Hat","product":"Red Hat Data Grid 8","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:jboss_fuse:7"],"vendor":"Red Hat","product":"Red Hat Fuse 7","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:integration:1"],"vendor":"Red Hat","product":"Red Hat Integration Camel K 1","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:camel_quarkus:2"],"vendor":"Red Hat","product":"Red Hat Integration Camel Quarkus 2","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:jboss_data_grid:7"],"vendor":"Red Hat","product":"Red Hat JBoss Data Grid 7","packageName":"undertow","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7","packageName":"undertow","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jbosseapxp"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","packageName":"undertow","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_fuse_service_works:6"],"vendor":"Red Hat","product":"Red Hat JBoss Fuse Service Works 6","packageName":"undertow","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:jboss_enterprise_bpms_platform:7"],"vendor":"Red Hat","product":"Red Hat Process Automation 7","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"],"vendor":"Red Hat","product":"Red Hat Single Sign-On 7","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:amq_streams:1"],"vendor":"Red Hat","product":"streams for Apache Kafka","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"}],"modified":"2026-10-14T17:27:47.203Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:0383","https://access.redhat.com/errata/RHSA-2026:0384","https://access.redhat.com/errata/RHSA-2026:0386","https://access.redhat.com/errata/RHSA-2026:3889","https://access.redhat.com/errata/RHSA-2026:3891","https://access.redhat.com/errata/RHSA-2026:3892","https://access.redhat.com/errata/RHSA-2026:4915","https://access.redhat.com/errata/RHSA-2026:4916","https://access.redhat.com/errata/RHSA-2026:4917","https://access.redhat.com/errata/RHSA-2026:4924","https://access.redhat.com/errata/RHSA-2026:6011","https://access.redhat.com/errata/RHSA-2026:6012","https://access.redhat.com/security/cve/CVE-2024-3884","https://bugzilla.redhat.com/show_bug.cgi?id=2275287"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-3884","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-12-03T20:50:16.644717Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-05T16:41:59.098Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-14T17:27:47.203Z"}}},"related_cves":[{"value":"CVE-2024-3884","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":16352,"advisory_id":"6bd40026-ff22-4618-a285-4c2ccfb94918","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-81829","source_published_at":"2026-09-17T14:01:30.083+00:00","published_at":"2026-10-25T01:15:30.32831+00:00","extraction_method":"structured","technologies":["core-cve","exploit-intelligence","red-hat-build-of-apicurio-registry-3","red-hat-build-of-quarkus","red-hat-build-of-quarkus-3-27-5-sp2","red-hat-build-of-quarkus-3-33-3-sp2","red-hat-jboss-enterprise-application-platform-8","red-hat-jboss-enterprise-application-platform-expansion-pack"],"cve_ids":["CVE-2026-81829"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver","summary":"A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Balancers. When the AWS_ALB key provider is configured, the resolver constructs the key-fetch URL by directly concatenating the attacker-controlled kid header value from an inbound JWT without sanitizing path traversal characters or query-string separators. This allows an unauthenticated remote attacker to force the application server to issue GET requests to arbitrary paths on the same origin as the configured key endpoint. As a result, non-public endpoints or internal data reachable on that origin may be read by the attacker before JWT signature verification takes place.","evidence":"cve:CVE-2026-81829","products":[{"name":{"value":"Red Hat build of Quarkus 3.27.5.SP2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus 3.33.3.SP2","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Exploit Intelligence","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apicurio Registry 3","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apicurio Registry 3","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform Expansion Pack","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-81829","aliases":["CVE-2026-81829"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"cpes":["cpe:/a:redhat:quarkus:3.27::el8"],"vendor":"Red Hat","product":"Red Hat build of Quarkus 3.27.5.SP2","packageName":"quarkus-smallrye-jwt","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:quarkus:3.33::el8"],"vendor":"Red Hat","product":"Red Hat build of Quarkus 3.33.3.SP2","packageName":"quarkus-smallrye-jwt","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:exploit_intelligence:0"],"vendor":"Red Hat","product":"Exploit Intelligence","packageName":"exploit-intelligence/agent-client-rhel9","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:apicurio_registry:3"],"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 3","packageName":"quarkus-smallrye-jwt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:apicurio_registry:3"],"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 3","packageName":"smallrye-jwt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Quarkus","packageName":"smallrye-jwt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8","packageName":"smallrye-jwt","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jbosseapxp"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","packageName":"smallrye-jwt","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"affected"}],"modified":"2026-10-09T16:26:17.785Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2026:69440","https://access.redhat.com/errata/RHSA-2026:69470","https://access.redhat.com/security/cve/CVE-2026-81829","https://bugzilla.redhat.com/show_bug.cgi?id=2524980"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-81829","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:45:20.084526Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:45:29.941Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-09T16:26:17.785Z"}}},"related_cves":[{"value":"CVE-2026-81829","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":12455,"advisory_id":"ae8fa107-1a30-4f15-84ea-f5b92650939c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-2700","source_published_at":"2024-04-04T13:46:39.956+00:00","published_at":"2026-10-25T00:08:01.906117+00:00","extraction_method":"structured","technologies":["core-cve","hawtio-4-0-0-for-red-hat-build-of-apache-camel-4","red-hat-amq-streams-2-7-0","red-hat-build-of-apache-camel-4-for-quarkus-3","red-hat-build-of-apache-camel-hawtio-4","red-hat-build-of-apicurio-registry-2-6-1-ga","red-hat-build-of-keycloak","red-hat-build-of-optaplanner-8","red-hat-build-of-quarkus","red-hat-build-of-quarkus-3-2-12-final","red-hat-build-of-quarkus-3-8-4-redhat","red-hat-integration-camel-k-1","red-hat-integration-camel-quarkus-2","rhoss-1-33-rhel-8"],"cve_ids":["CVE-2024-2700"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Quarkus-core: leak of local configuration properties into quarkus applications","summary":"A vulnerability was found in the quarkus-core component. Quarkus captures local environment variables from the Quarkus namespace during the application's build, therefore, running the resulting application inherits the values captured at build time. Some local environment variables may have been set by the developer or CI environment for testing purposes, such as dropping the database during application startup or trusting all TLS certificates to accept self-signed certificates. If these properties are configured using environment variables or the .env facility, they are captured into the built application, which can lead to dangerous behavior if the application does not override these values. This behavior only happens for configuration properties from the `quarkus.*` namespace. Application-specific properties are not captured.","evidence":"cve:CVE-2024-2700","products":[{"name":{"value":"HawtIO 4.0.0 for Red Hat build of Apache Camel 4","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat AMQ Streams 2.7.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apicurio Registry 2.6.1 GA","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus 3.2.12.Final","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus 3.8.4.redhat","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHOSS-1.33-RHEL-8","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel 4 for Quarkus 3","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel - HawtIO 4","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Build of Keycloak","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of OptaPlanner 8","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Integration Camel K 1","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Integration Camel Quarkus 2","evidence":"/containers/cna/affected/48/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2024-2700","aliases":["CVE-2024-2700"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"versions":[{"status":"affected","version":"3.8.4"},{"status":"affected","version":"3.2.12"}],"packageName":"quarkus-core","collectionURL":"https://github.com/cockpit-project/cockpit/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhboac_hawtio:4.0"],"vendor":"Red Hat","product":"HawtIO 4.0.0 for Red Hat build of Apache Camel 4","packageName":"quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:amq_streams:2"],"vendor":"Red Hat","product":"Red Hat AMQ Streams 2.7.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:apicurio_registry:2.6"],"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 2.6.1 GA","packageName":"quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:quarkus:3.2::el8"],"vendor":"Red Hat","product":"Red Hat build of Quarkus 3.2.12.Final","versions":[{"status":"unaffected","version":"3.2.12.Final-redhat-00001","lessThan":"*","versionType":"rpm"}],"packageName":"io.quarkus/quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_application_runtimes:1.0"],"vendor":"Red Hat","product":"Red Hat build of Quarkus 3.8.4.redhat","versions":[{"status":"unaffected","version":"3.8.4.redhat-00002","lessThan":"*","versionType":"rpm"}],"packageName":"io.quarkus/quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/client-kn-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-in-memory-channel-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-istio-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-kafka-broker-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-kafka-broker-post-install-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-kafka-broker-receiver-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-kafka-broker-webhook-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-mtbroker-filter-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-mtbroker-ingress-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-mtchannel-broker-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-mtping-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-storage-version-migration-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/eventing-webhook-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.33.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/func-utils-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.33.0-5","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/ingress-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.33.0-5","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/knative-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/kn-cli-artifacts-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/kourier-control-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/net-istio-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/net-istio-webhook-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.33.0-6","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/serverless-operator-bundle","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.33.0-5","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/serverless-rhel8-operator","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/serving-activator-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/serving-autoscaler-hpa-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/serving-autoscaler-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/serving-controller-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/serving-queue-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/serving-storage-version-migration-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/serving-webhook-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.33.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1/svls-must-gather-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.33.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:openshift_serverless:1.33::el8"],"vendor":"Red Hat","product":"RHOSS-1.33-RHEL-8","versions":[{"status":"unaffected","version":"1.12.0-4","lessThan":"*","versionType":"rpm"}],"packageName":"openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:camel_quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4 for Quarkus 3","packageName":"quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:apache_camel_hawtio:4"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel - HawtIO 4","packageName":"quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:build_keycloak:"],"vendor":"Red Hat","product":"Red Hat Build of Keycloak","packageName":"quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:optaplanner:::el6"],"vendor":"Red Hat","product":"Red Hat build of OptaPlanner 8","packageName":"quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:quarkus:2"],"vendor":"Red Hat","product":"Red Hat build of Quarkus","packageName":"quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:integration:1"],"vendor":"Red Hat","product":"Red Hat Integration Camel K 1","packageName":"quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:camel_quarkus:2"],"vendor":"Red Hat","product":"Red Hat Integration Camel Quarkus 2","packageName":"quarkus-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-08T11:59:02.121Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2024:11023","https://access.redhat.com/errata/RHSA-2024:2106","https://access.redhat.com/errata/RHSA-2024:2705","https://access.redhat.com/errata/RHSA-2024:3527","https://access.redhat.com/errata/RHSA-2024:4028","https://access.redhat.com/errata/RHSA-2024:4873","https://access.redhat.com/security/cve/CVE-2024-2700","https://bugzilla.redhat.com/show_bug.cgi?id=2273281"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-2700","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-04-23T20:55:35.446485Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-06-04T17:30:17.872Z"}},{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2106","name":"RHSA-2024:2106","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2705","name":"RHSA-2024:2705","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3527","name":"RHSA-2024:3527","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4028","name":"RHSA-2024:4028","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4873","name":"RHSA-2024:4873","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-2700","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273281","name":"RHBZ#2273281","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-01T19:18:48.249Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-08T11:59:02.121Z"}}},"related_cves":[{"value":"CVE-2024-2700","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":12420,"advisory_id":"548c2000-3b10-4782-8bc2-8880f831e60d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-7885","source_published_at":"2024-08-21T14:13:36.579+00:00","published_at":"2026-10-25T00:07:40.154155+00:00","extraction_method":"structured","technologies":["core-cve","hawtio-4-0-0-for-red-hat-build-of-apache-camel-4","red-hat-build-of-apache-camel-3-20-7-for-spring-boot","red-hat-build-of-apache-camel-4-4-2-for-spring-boot","red-hat-build-of-apache-camel-for-spring-boot-3","red-hat-build-of-apache-camel-hawtio-4","red-hat-build-of-keycloak","red-hat-build-of-quarkus","red-hat-data-grid-8","red-hat-fuse-7","red-hat-integration-camel-k-1","red-hat-jboss-data-grid-7","red-hat-jboss-enterprise-application-platform","red-hat-jboss-enterprise-application-platform-7","red-hat-jboss-enterprise-application-platform-7-3-eus-for-rhel-7","red-hat-jboss-enterprise-application-platform-7-4-for-rhel-8","red-hat-jboss-enterprise-application-platform-7-4-for-rhel-9","red-hat-jboss-enterprise-application-platform-7-4-on-rhel-7","red-hat-jboss-enterprise-application-platform-8","red-hat-jboss-enterprise-application-platform-8-0-for-rhel-8","red-hat-jboss-enterprise-application-platform-8-0-for-rhel-9","red-hat-jboss-enterprise-application-platform-expansion-pack","red-hat-process-automation-7","red-hat-single-sign-on-7"],"cve_ids":["CVE-2024-7885"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Undertow: improper state management in proxy protocol parsing causes information leakage","summary":"A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.","evidence":"cve:CVE-2024-7885","products":[{"name":{"value":"HawtIO 4.0.0 for Red Hat build of Apache Camel 4","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel 3.20.7 for Spring Boot","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel 4.4.2 for Spring Boot","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel for Spring Boot 3","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel - HawtIO 4","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Build of Keycloak","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Data Grid 8","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Fuse 7","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Integration Camel K 1","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Data Grid 7","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform Expansion Pack","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Process Automation 7","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Single Sign-On 7","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2024-7885","aliases":["CVE-2024-7885"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"versions":[{"status":"affected","version":"0","lessThan":"2.2.36.Final","versionType":"custom"},{"status":"affected","version":"2.3.0.Alpha1","lessThan":"2.3.17.Final","versionType":"custom"}],"packageName":"undertow","collectionURL":"https://github.com/undertow-io/undertow","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:rhboac_hawtio:4.0"],"vendor":"Red Hat","product":"HawtIO 4.0.0 for Red Hat build of Apache Camel 4","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:apache_camel_spring_boot:3.20.7"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel 3.20.7 for Spring Boot","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:apache_camel_spring_boot:4.4.2"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4.4.2 for Spring Boot","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform","versions":[{"status":"unaffected","version":"2.2.33.SP2-redhat-00001","lessThan":"*","versionType":"rpm"}],"packageName":"io.undertow/undertow-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:1.11.0-1.redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-apache-commons-beanutils","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.4.11-1.Final_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-hornetq","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:1.7.2-19.Final_redhat_00020.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jboss-server-migration","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.0.41-5.SP6_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:7.3.15-5.GA_redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-4.redhat_00008.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-annotations","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-4.redhat_00008.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-6.redhat_00008.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-databind","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-4.redhat_00008.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-jaxrs-providers","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-6.redhat_00008.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-modules-base","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-3.redhat_00008.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-modules-java8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:1.7.2-20.Final_redhat_00021.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jboss-server-migration","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:4.1.63-6.Final_redhat_00004.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-netty","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.0.41-6.SP7_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:7.3.16-3.GA_redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","versions":[{"status":"unaffected","version":"0:2.2.33-2.SP2_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","versions":[{"status":"unaffected","version":"0:7.4.18-1.GA_redhat_00003.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","versions":[{"status":"unaffected","version":"0:2.2.33-2.SP2_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","versions":[{"status":"unaffected","version":"0:7.4.18-1.GA_redhat_00003.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","versions":[{"status":"unaffected","version":"0:2.2.33-2.SP2_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8","cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","versions":[{"status":"unaffected","version":"0:7.4.18-1.GA_redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8","packageName":"undertow-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8","cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:1.11.9-2.redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-amazon-ion-java","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8","cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:800.3.1-2.GA_redhat_00002.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-eap-product-conf-parent","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8","cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:2.3.14-2.SP2_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8","cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","versions":[{"status":"unaffected","version":"0:8.0.3-13.GA_redhat_00007.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8","cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:1.11.9-2.redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-amazon-ion-java","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8","cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:800.3.1-2.GA_redhat_00002.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-eap-product-conf-parent","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8","cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:2.3.14-2.SP2_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8","cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","versions":[{"status":"unaffected","version":"0:8.0.3-13.GA_redhat_00007.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap8-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:camel_spring_boot:3"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel for Spring Boot 3","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:apache_camel_hawtio:4"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel - HawtIO 4","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:build_keycloak:"],"vendor":"Red Hat","product":"Red Hat Build of Keycloak","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Quarkus","packageName":"quarkus-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_data_grid:8"],"vendor":"Red Hat","product":"Red Hat Data Grid 8","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_fuse:7"],"vendor":"Red Hat","product":"Red Hat Fuse 7","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:integration:1"],"vendor":"Red Hat","product":"Red Hat Integration Camel K 1","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_data_grid:7"],"vendor":"Red Hat","product":"Red Hat JBoss Data Grid 7","packageName":"undertow","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7","packageName":"undertow-core","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jbosseapxp"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","packageName":"undertow-core","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_bpms_platform:7"],"vendor":"Red Hat","product":"Red Hat Process Automation 7","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"],"vendor":"Red Hat","product":"Red Hat Single Sign-On 7","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-08T10:55:13.743Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2024:11023","https://access.redhat.com/errata/RHSA-2024:6508","https://access.redhat.com/errata/RHSA-2024:6883","https://access.redhat.com/errata/RHSA-2024:7441","https://access.redhat.com/errata/RHSA-2024:7442","https://access.redhat.com/errata/RHSA-2024:7735","https://access.redhat.com/errata/RHSA-2024:7736","https://access.redhat.com/errata/RHSA-2024:8080","https://access.redhat.com/errata/RHSA-2025:16667","https://access.redhat.com/errata/RHSA-2026:0743","https://access.redhat.com/security/cve/CVE-2024-7885","https://bugzilla.redhat.com/show_bug.cgi?id=2305290"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-7885","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-08-21T15:21:22.416004Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-08-21T15:21:42.735Z"}},{"title":"CVE Program Container","references":[{"url":"https://security.netapp.com/advisory/ntap-20241011-0004/"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-10-11T22:03:18.905Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-08T10:55:13.743Z"}}},"related_cves":[{"value":"CVE-2024-7885","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":12316,"advisory_id":"bfd48ce7-9f08-4721-b2e8-39a5b458b463","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-1635","source_published_at":"2024-02-19T21:23:14.496+00:00","published_at":"2026-10-25T00:05:24.671307+00:00","extraction_method":"structured","technologies":["core-cve","openshift-serverless","red-hat-build-of-apache-camel-4-4-1-for-spring-boot-3-2","red-hat-build-of-apache-camel-4-for-quarkus-3","red-hat-build-of-apache-camel-for-spring-boot-3","red-hat-build-of-apache-camel-for-spring-boot-4","red-hat-build-of-apicurio-registry-2","red-hat-build-of-keycloak","red-hat-build-of-optaplanner-8","red-hat-build-of-quarkus","red-hat-data-grid-8","red-hat-fuse-7-13-0","red-hat-integration-camel-k-1","red-hat-integration-camel-quarkus-2","red-hat-jboss-data-grid-7","red-hat-jboss-enterprise-application-platform-7-1-eus-for-rhel-7","red-hat-jboss-enterprise-application-platform-7-3-eus-for-rhel-7","red-hat-jboss-enterprise-application-platform-7-4-16","red-hat-jboss-enterprise-application-platform-7-4-for-rhel-8","red-hat-jboss-enterprise-application-platform-7-4-for-rhel-9","red-hat-jboss-enterprise-application-platform-7-4-on-rhel-7","red-hat-jboss-enterprise-application-platform-8","red-hat-jboss-fuse-service-works-6","red-hat-process-automation-7","red-hat-single-sign-on-7-6-for-rhel-7","red-hat-single-sign-on-7-6-for-rhel-8","red-hat-single-sign-on-7-6-for-rhel-9","rhel-8-based-middleware-containers","rhsso-7-6-8","streams-for-apache-kafka"],"cve_ids":["CVE-2024-1635"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol","summary":"A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and open file limits exhausted at some point, depending on the amount of memory available. At HTTP upgrade to remoting, the WriteTimeoutStreamSinkConduit leaks connections if RemotingConnection is closed by Remoting ServerConnectionOpenListener. Because the remoting connection originates in Undertow as part of the HTTP upgrade, there is an external layer to the remoting connection. This connection is unaware of the outermost layer when closing the connection during the connection opening procedure. Hence, the Undertow WriteTimeoutStreamSinkConduit is not notified of the closed connection in this scenario. Because WriteTimeoutStreamSinkConduit creates a timeout task, the whole dependency tree leaks via that task, which is added to XNIO WorkerThread. So, the workerThread points to the Undertow conduit, which contains the connections and causes the leak.","evidence":"cve:CVE-2024-1635","products":[{"name":{"value":"Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Fuse 7.13.0","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4.16","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Single Sign-On 7.6 for RHEL 7","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Single Sign-On 7.6 for RHEL 8","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Single Sign-On 7.6 for RHEL 9","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHEL-8 based Middleware Containers","evidence":"/containers/cna/affected/29/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"RHSSO 7.6.8","evidence":"/containers/cna/affected/30/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"OpenShift Serverless","evidence":"/containers/cna/affected/31/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel 4 for Quarkus 3","evidence":"/containers/cna/affected/32/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel for Spring Boot 3","evidence":"/containers/cna/affected/33/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apache Camel for Spring Boot 4","evidence":"/containers/cna/affected/34/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Apicurio Registry 2","evidence":"/containers/cna/affected/35/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Build of Keycloak","evidence":"/containers/cna/affected/36/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of OptaPlanner 8","evidence":"/containers/cna/affected/37/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus","evidence":"/containers/cna/affected/38/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat build of Quarkus","evidence":"/containers/cna/affected/39/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Data Grid 8","evidence":"/containers/cna/affected/40/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Integration Camel K 1","evidence":"/containers/cna/affected/41/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Integration Camel Quarkus 2","evidence":"/containers/cna/affected/42/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Data Grid 7","evidence":"/containers/cna/affected/43/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Enterprise Application Platform 8","evidence":"/containers/cna/affected/44/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat JBoss Fuse Service Works 6","evidence":"/containers/cna/affected/45/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Process Automation 7","evidence":"/containers/cna/affected/46/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"streams for Apache Kafka","evidence":"/containers/cna/affected/47/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2024-1635","aliases":["CVE-2024-1635"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"versions":[{"status":"affected","version":"1.31.0"}],"packageName":"undertow","collectionURL":"https://github.com/undertow-io/undertow","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:apache_camel_spring_boot:4.4::el6"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_fuse:7.13"],"vendor":"Red Hat","product":"Red Hat Fuse 7.13.0","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:1.5.5.016-1.redhat_00001.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-activemq-artemis","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"1:1.5.5.016-1.redhat_00001.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-artemis-native","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:3.5.11-1.Final_redhat_00001.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jboss-xnio-base","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:1.14.2-1.redhat_00002.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jsoup","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:1.4.18-14.SP13_redhat_00001.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:7.1.10-2.GA_redhat_00002.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:5.0.3-2.redhat_00002.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-woodstox-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.0.10-2.redhat_00002.1.ep7.el7","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-xml-security","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-3.redhat_00006.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-annotations","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-3.redhat_00006.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-core","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-5.redhat_00006.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-databind","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-3.redhat_00006.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-jaxrs-providers","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-5.redhat_00006.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-modules-base","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.10.4-2.redhat_00006.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jackson-modules-java8","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:1.7.2-16.Final_redhat_00017.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-jboss-server-migration","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:4.1.63-5.Final_redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-netty","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:2.0.41-4.SP5_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:7.3.14-3.GA_redhat_00002.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","versions":[{"status":"unaffected","version":"0:1.10.17-1.Final_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-wildfly-elytron","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4.16","versions":[{"status":"unaffected","version":"2.2.30.SP1-redhat-00001","lessThan":"*","versionType":"rpm"}],"packageName":"io.undertow/undertow-core","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","versions":[{"status":"unaffected","version":"0:2.2.30-1.SP1_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","versions":[{"status":"unaffected","version":"0:2.2.30-1.SP1_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","versions":[{"status":"unaffected","version":"0:2.2.30-1.SP1_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm"}],"packageName":"eap7-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:red_hat_single_sign_on:7.6::el7"],"vendor":"Red Hat","product":"Red Hat Single Sign-On 7.6 for RHEL 7","versions":[{"status":"unaffected","version":"0:18.0.13-1.redhat_00001.1.el7sso","lessThan":"*","versionType":"rpm"}],"packageName":"rh-sso7-keycloak","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:red_hat_single_sign_on:7.6::el8"],"vendor":"Red Hat","product":"Red Hat Single Sign-On 7.6 for RHEL 8","versions":[{"status":"unaffected","version":"0:18.0.13-1.redhat_00001.1.el8sso","lessThan":"*","versionType":"rpm"}],"packageName":"rh-sso7-keycloak","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:red_hat_single_sign_on:7.6::el9"],"vendor":"Red Hat","product":"Red Hat Single Sign-On 7.6 for RHEL 9","versions":[{"status":"unaffected","version":"0:18.0.13-1.redhat_00001.1.el9sso","lessThan":"*","versionType":"rpm"}],"packageName":"rh-sso7-keycloak","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","versions":[{"status":"unaffected","version":"7.6-46","lessThan":"*","versionType":"rpm"}],"packageName":"rh-sso-7/sso76-openshift-rhel8","collectionURL":"https://catalog.redhat.com/software/containers/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:red_hat_single_sign_on:7.6"],"vendor":"Red Hat","product":"RHSSO 7.6.8","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:serverless:1"],"vendor":"Red Hat","product":"OpenShift Serverless","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:camel_quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4 for Quarkus 3","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:camel_spring_boot:3"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel for Spring Boot 3","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:camel_spring_boot:4"],"vendor":"Red Hat","product":"Red Hat build of Apache Camel for Spring Boot 4","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:service_registry:2"],"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 2","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:build_keycloak:"],"vendor":"Red Hat","product":"Red Hat Build of Keycloak","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:optaplanner:::el6"],"vendor":"Red Hat","product":"Red Hat build of OptaPlanner 8","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:quarkus:2"],"vendor":"Red Hat","product":"Red Hat build of Quarkus","packageName":"quarkus-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Quarkus","packageName":"quarkus-undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_data_grid:8"],"vendor":"Red Hat","product":"Red Hat Data Grid 8","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:integration:1"],"vendor":"Red Hat","product":"Red Hat Integration Camel K 1","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:camel_quarkus:2"],"vendor":"Red Hat","product":"Red Hat Integration Camel Quarkus 2","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_data_grid:7"],"vendor":"Red Hat","product":"Red Hat JBoss Data Grid 7","packageName":"undertow","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8"],"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8","packageName":"undertow-core","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unaffected"},{"cpes":["cpe:/a:redhat:jboss_fuse_service_works:6"],"vendor":"Red Hat","product":"Red Hat JBoss Fuse Service Works 6","packageName":"undertow","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","defaultStatus":"unknown"},{"cpes":["cpe:/a:redhat:jboss_enterprise_bpms_platform:7"],"vendor":"Red Hat","product":"Red Hat Process Automation 7","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/a:redhat:amq_streams:1"],"vendor":"Red Hat","product":"streams for Apache Kafka","packageName":"undertow","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"}],"modified":"2026-10-07T21:29:54.592Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2024:1674","https://access.redhat.com/errata/RHSA-2024:1675","https://access.redhat.com/errata/RHSA-2024:1676","https://access.redhat.com/errata/RHSA-2024:1677","https://access.redhat.com/errata/RHSA-2024:1860","https://access.redhat.com/errata/RHSA-2024:1861","https://access.redhat.com/errata/RHSA-2024:1862","https://access.redhat.com/errata/RHSA-2024:1864","https://access.redhat.com/errata/RHSA-2024:1866","https://access.redhat.com/errata/RHSA-2024:3354","https://access.redhat.com/errata/RHSA-2024:4884","https://access.redhat.com/errata/RHSA-2025:4226","https://access.redhat.com/errata/RHSA-2025:9583","https://access.redhat.com/security/cve/CVE-2024-1635","https://bugzilla.redhat.com/show_bug.cgi?id=2264928"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-1635","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-02-22T16:54:05.178381Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-06-05T13:50:19.172Z"}},{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:1674","name":"RHSA-2024:1674","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1675","name":"RHSA-2024:1675","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1676","name":"RHSA-2024:1676","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1677","name":"RHSA-2024:1677","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1860","name":"RHSA-2024:1860","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1861","name":"RHSA-2024:1861","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1862","name":"RHSA-2024:1862","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1864","name":"RHSA-2024:1864","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1866","name":"RHSA-2024:1866","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1635","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264928","name":"RHBZ#2264928","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240322-0007/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-01T18:48:21.580Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-07T21:29:54.592Z"}}},"related_cves":[{"value":"CVE-2024-1635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":3418,"advisory_id":"54c8d207-5f60-4e0c-a433-c073c812f4b8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6393","source_published_at":"2023-12-06T16:58:54.23+00:00","published_at":"2026-10-24T21:34:25.565628+00:00","extraction_method":"structured","technologies":["core-cve","red-hat-build-of-quarkus"],"cve_ids":["CVE-2023-6393"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Quarkus: potential invalid reuse of context when @cacheresult on a uni is used","summary":"A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial \"completion\" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contains sensitive information, and could allow a malicious user to benefit from a POST request returning the response that is meant for another user, gaining access to sensitive data.","evidence":"cve:CVE-2023-6393","products":[{"name":{"value":"Red Hat build of Quarkus","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-6393","aliases":["CVE-2023-6393"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"cpes":["cpe:/a:redhat:quarkus:3"],"vendor":"Red Hat","product":"Red Hat build of Quarkus","packageName":"quarkus-cache","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-09-29T10:10:07.504Z","provider":"cve","references":["https://access.redhat.com/errata/RHSA-2023:7700","https://access.redhat.com/security/cve/CVE-2023-6393","https://bugzilla.redhat.com/show_bug.cgi?id=2253113"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-6393","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253113","name":"RHBZ#2253113","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:28:21.807Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-09-29T10:10:07.504Z"}}},"related_cves":[{"value":"CVE-2023-6393","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":32292,"next_before":3418}