CVE-2019-10184

25

FAUCET Score

CVE-2019-10184 is an information leak vulnerability affecting Undertow versions prior to 2.0.23.Final, impacting products from NetApp and Red Hat. This high-severity flaw (CVSS 7.5) allows unauthenticated attackers to predict web application directory structures by sending requests without trailing slashes, potentially leading to sensitive information disclosure. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 2.0.23CPE matchmatch criteria	cpe:2.3:a:redhat:undertow::::::::
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:a:redhat:jboss_data_grid:-::::text-only:::
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:a:redhat:jboss_enterprise_application_platform:-::::text-only:::
		7.0.0CPE matchmatch criteria	cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:::::::*
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:a:redhat:openshift_application_runtimes:-::::text-only:::

CVSS Data

CVSS version used by this source: 3.0

5.3MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

Exploitability Score

3.9

Impact Score

1.4

CvssVersion

3.0

Exploit Intelligence

EPSS Score

3.48%

Probability of exploitation in next 30 days

EPSS Percentile

87.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0348 is in the 78th percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (115)

github_advisorypatch availablevia nvd_reference

mavenpatch availablevia ghsa

Product: io.undertow:undertow-servletFixed in: 2.0.23

redhatpatch availablevia redhat_api

Product: Red Hat Fuse 7.6.0Fixed in: undertow

redhatpatch availablevia redhat_api

Product: Red Hat JBoss EAP 7.2Fixed in: undertow

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-activemq-artemis-0:2.9.0-1.redhat_00005.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-codehaus-jackson-0:1.9.13-9.redhat_00006.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-glassfish-jsf-0:2.3.5-4.SP3_redhat_00002.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-hal-console-0:3.0.16-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-hibernate-0:5.3.11-2.SP1_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-infinispan-0:9.3.7-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-ironjacamar-0:1.4.17-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jackson-annotations-0:2.9.9-1.redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jackson-core-0:2.9.9-1.redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jackson-databind-0:2.9.9.3-1.redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jackson-jaxrs-providers-0:2.9.9-2.redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jackson-modules-base-0:2.9.9-1.redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jackson-modules-java8-0:2.9.9-1.redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jboss-ejb-client-0:4.0.23-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jboss-jaxrs-api_2.1_spec-0:1.0.3-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jboss-logging-0:3.3.3-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jboss-logmanager-0:2.1.14-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jboss-marshalling-0:2.0.9-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jboss-msc-0:1.4.8-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jboss-remoting-0:5.0.14-1.SP1_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jboss-server-migration-0:1.3.1-4.Final_redhat_00004.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jboss-xnio-base-0:3.7.3-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-jgroups-0:4.0.20-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-narayana-0:5.9.6-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-netty-0:4.1.34-2.Final_redhat_00002.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-picketbox-0:5.0.3-5.Final_redhat_00004.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00007.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00007.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-undertow-0:2.0.25-1.SP1_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-weld-core-0:3.0.6-2.Final_redhat_00002.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-wildfly-0:7.2.4-1.GA_redhat_00002.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-wildfly-elytron-0:1.6.4-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-wildfly-elytron-tool-0:1.4.3-1.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 6Fixed in: eap7-wildfly-transaction-client-0:1.1.6-2.Final_redhat_00001.1.el6eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-activemq-artemis-0:2.9.0-1.redhat_00005.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-codehaus-jackson-0:1.9.13-9.redhat_00006.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-glassfish-jsf-0:2.3.5-4.SP3_redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-hal-console-0:3.0.16-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-hibernate-0:5.3.11-2.SP1_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-infinispan-0:9.3.7-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-ironjacamar-0:1.4.17-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jackson-annotations-0:2.9.9-1.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jackson-core-0:2.9.9-1.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jackson-databind-0:2.9.9.3-1.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jackson-jaxrs-providers-0:2.9.9-2.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jackson-modules-base-0:2.9.9-1.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jackson-modules-java8-0:2.9.9-1.redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jboss-ejb-client-0:4.0.23-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jboss-jaxrs-api_2.1_spec-0:1.0.3-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jboss-logging-0:3.3.3-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jboss-logmanager-0:2.1.14-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jboss-marshalling-0:2.0.9-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jboss-msc-0:1.4.8-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jboss-remoting-0:5.0.14-1.SP1_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jboss-server-migration-0:1.3.1-4.Final_redhat_00004.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jboss-xnio-base-0:3.7.3-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-jgroups-0:4.0.20-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-narayana-0:5.9.6-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-netty-0:4.1.34-2.Final_redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-picketbox-0:5.0.3-5.Final_redhat_00004.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00007.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00007.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-undertow-0:2.0.25-1.SP1_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-weld-core-0:3.0.6-2.Final_redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-wildfly-0:7.2.4-1.GA_redhat_00002.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-wildfly-elytron-0:1.6.4-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-wildfly-elytron-tool-0:1.4.3-1.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 7Fixed in: eap7-wildfly-transaction-client-0:1.1.6-2.Final_redhat_00001.1.el7eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-activemq-artemis-0:2.9.0-1.redhat_00005.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-codehaus-jackson-0:1.9.13-9.redhat_00006.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-glassfish-jsf-0:2.3.5-4.SP3_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-hal-console-0:3.0.16-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-hibernate-0:5.3.11-2.SP1_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-infinispan-0:9.3.7-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-ironjacamar-0:1.4.17-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jackson-annotations-0:2.9.9-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jackson-core-0:2.9.9-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jackson-databind-0:2.9.9.3-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jackson-jaxrs-providers-0:2.9.9-2.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jackson-modules-base-0:2.9.9-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jackson-modules-java8-0:2.9.9-1.redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat Data Grid 7.3.3Fixed in: undertow

redhatpatch availablevia redhat_api

Product: Red Hat Single Sign-On 7.3 for RHEL 8Fixed in: rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el8sso

redhatpatch availablevia redhat_api

Product: Text-Only RHOAR

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jboss-ejb-client-0:4.0.23-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jboss-jaxrs-api_2.1_spec-0:1.0.3-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jboss-logging-0:3.3.3-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jboss-logmanager-0:2.1.14-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jboss-marshalling-0:2.0.9-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jboss-msc-0:1.4.8-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jboss-remoting-0:5.0.14-1.SP1_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jboss-server-migration-0:1.3.1-4.Final_redhat_00004.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jboss-xnio-base-0:3.7.3-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-jgroups-0:4.0.20-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-narayana-0:5.9.6-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-netty-0:4.1.34-2.Final_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-picketbox-0:5.0.3-5.Final_redhat_00004.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-picketlink-bindings-0:2.5.5-20.SP12_redhat_00007.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-picketlink-federation-0:2.5.5-20.SP12_redhat_00007.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-undertow-0:2.0.25-1.SP1_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-weld-core-0:3.0.6-2.Final_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-wildfly-0:7.2.4-1.GA_redhat_00002.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-wildfly-elytron-0:1.6.4-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-wildfly-elytron-tool-0:1.4.3-1.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 7.2 for RHEL 8Fixed in: eap7-wildfly-transaction-client-0:1.1.6-2.Final_redhat_00001.1.el8eap

redhatpatch availablevia redhat_api

Product: Red Hat Single Sign-On 7.3.4 zipFixed in: undertow

redhatpatch availablevia redhat_api

Product: Red Hat Single Sign-On 7.3 for RHEL 6Fixed in: rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el6sso

redhatpatch availablevia redhat_api

Product: Red Hat Single Sign-On 7.3 for RHEL 7Fixed in: rh-sso7-keycloak-0:4.8.13-1.Final_redhat_00001.1.el7sso

redhatpatch availablevia redhat_api

Product: Red Hat Single Sign-On 7.3 for RHEL 7Fixed in: rh-sso7-libunix-dbus-java-0:0.8.0-2.el7sso

redhatvendor investigatingvia nvd_reference

redhatno patchvia redhat_api

Product: Red Hat OpenShift Application RuntimesFixed in: undertow

Vendor Advisories (2)

mavenGHSA-w69w-jvc7-wjgvhigh

Undertow Missing Authorization when requesting a protected directory without trailing slash

redhatCVE-2019-10184Low

undertow: Information leak in requests for directories without trailing slashes

References

access.redhat.com / errata/RHSA-2019:2935

Vendor Advisory

access.redhat.com / errata/RHSA-2019:2936

Vendor Advisory

access.redhat.com / errata/RHSA-2019:2937

Vendor Advisory

access.redhat.com / errata/RHSA-2019:2938

Vendor Advisory

access.redhat.com / errata/RHSA-2019:2998

Vendor Advisory

access.redhat.com / errata/RHSA-2019:3044

Vendor Advisory

access.redhat.com / errata/RHSA-2019:3045

Vendor Advisory

access.redhat.com / errata/RHSA-2019:3046

Vendor Advisory

access.redhat.com / errata/RHSA-2019:3050

Vendor Advisory

access.redhat.com / errata/RHSA-2020:0727

Vendor Advisory

bugzilla.redhat.com / show_bug.cgi

Issue TrackingVendor Advisory

github.com / undertow-io/undertow/pull/794

PatchThird Party Advisory

security.netapp.com / advisory/ntap-20220210-0016

Third Party Advisory