Information disclosure in Undertow for Wildfly Application Server
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2018-14642 |
| CWE-ID | CWE-200 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Undertow Server applications / Web servers |
| Vendor | Red Hat Inc. |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
1) Information disclosure
EUVDB-ID: #VU20068
Risk: Medium
CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2018-14642
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to incorrect processing of HTTP response headers during buffer flushing. A remote attacker can view contents of HTTP responses from previous requests.
Install updates from vendor's website.
Vulnerable software versionsUndertow: 2.0.0 - 2.0.18
External linkshttp://access.redhat.com/errata/RHSA-2019:0362
http://access.redhat.com/errata/RHSA-2019:0364
http://access.redhat.com/errata/RHSA-2019:0365
http://access.redhat.com/errata/RHSA-2019:0380
http://access.redhat.com/errata/RHSA-2019:1106
http://access.redhat.com/errata/RHSA-2019:1107
http://access.redhat.com/errata/RHSA-2019:1108
http://access.redhat.com/errata/RHSA-2019:1140
http://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14642
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
