A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2020:0729 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14888 | Issue Tracking Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20220211-0001/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
01 Apr 2022, 15:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | (REDHAT) https://access.redhat.com/errata/RHSA-2020:0729 - Third Party Advisory | |
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20220211-0001/ - Third Party Advisory | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* cpe:2.3:a:redhat:jboss_data_grid:-:*:*:*:text-only:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:* |
|
| First Time |
Netapp
Netapp active Iq Unified Manager |
11 Feb 2022, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2020-01-23 17:15
Updated : 2023-12-10 13:13
NVD link : CVE-2019-14888
Mitre link : CVE-2019-14888
CVE.ORG link : CVE-2019-14888
JSON object : View
Products Affected
redhat
- undertow
- jboss_fuse
- single_sign-on
- jboss_enterprise_application_platform
- jboss_data_grid
netapp
- active_iq_unified_manager
CWE