Incorrect Authorization in Undertow

Also known as GHSA-cp7v-vmv7-6x2q

Published 8 y ago 2018-04-18 · modified 4 mo ago 2026-06-17 · JSON

CVSS

4.8

v3.0 · CNA

CISA KEV

not known exploited

EPSS

2.0%

percentile 81%

Public exploits

none known

undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the desired content on the server.

Exploit prediction (EPSS)

2.01% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	4.8	`CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N`
CNA	3.0	4.8	`CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N`
NVD	3.0	5.9	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N`
NVD	2.0	4.3	`AV:N/AC:M/Au:N/C:P/I:N/A:N`
GitHub	3.0	5.9	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N`

Affected packages

Ecosystem	Package	Affected	Fixed in
maven	`io.undertow:undertow-core`	>=2.0.0.Alpha1, <2.0.2.FInal <1.4.24.Final	2.0.2.FInal 1.4.24.Final

Affected products

unspecified undertow

Classification

Weakness

CWE-287 Improper Authentication
CWE-863 Incorrect Authorization

References

access.redhat.com /errata/RHSA-2018:0479 · vendor-advisory, x_refsource_REDHAT, x_transferred
access.redhat.com /errata/RHSA-2018:0481 · vendor-advisory, x_refsource_REDHAT, x_transferred
access.redhat.com /errata/RHSA-2018:2405 · vendor-advisory, x_refsource_REDHAT, x_transferred
access.redhat.com /errata/RHSA-2018:1525 · vendor-advisory, x_refsource_REDHAT, x_transferred
bugzilla.redhat.com /show_bug.cgi?id=CVE-2017-12196 · x_refsource_CONFIRM, x_transferred
access.redhat.com /errata/RHSA-2018:0480 · vendor-advisory, x_refsource_REDHAT, x_transferred
issues.jboss.org /browse/UNDERTOW-1190 · x_refsource_CONFIRM, x_transferred
access.redhat.com /errata/RHSA-2018:3768 · vendor-advisory, x_refsource_REDHAT, x_transferred
access.redhat.com /errata/RHSA-2018:0478 · vendor-advisory, x_refsource_REDHAT, x_transferred
nvd.nist.gov /vuln/detail/CVE-2017-12196 · advisory
github.com /undertow-io/undertow/commit/facb33a5cedaf4b7b96d3840a08210370a806870 · web
github.com /undertow-io/undertow · package

Sources

CVE List: CVE-2017-12196
GitHub Advisory: GHSA-cp7v-vmv7-6x2q
NVD: CVE-2017-12196

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary