CVE-2017-12196: Medium severity redhat undertow vulnerability
Published Oct 17, 2017
·Updated
It was discovered that when using Digest authentication, the server does not ensure that the value of the URI in the authorization header matches the URI in the HTTP request line. This allows the attacker to execute a MITM attack and access the desired content on the server.
Other sources
undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the desired content on the server.
When using a "Digest" authentication, server does not ensure that value of the "uri" attribute in "Authorization" header matches URI in HTTP request line. This can be exploitedby an attacker as a MITM attack to access desired content on server.
— Red Hat
Affected Software
65 affected componentsFixes available
redhat/eap7-activemq-artemis<0:1.5.5.009-1.redhat_1.1.ep7.el6
0:1.5.5.009-1.redhat_1.1.ep7.el6
redhat/eap7-apache-cxf<0:3.1.13-1.redhat_1.1.ep7.el6
0:3.1.13-1.redhat_1.1.ep7.el6
redhat/eap7-glassfish-jsf<0:2.2.13-6.SP5_redhat_1.1.ep7.el6
0:2.2.13-6.SP5_redhat_1.1.ep7.el6
redhat/eap7-hibernate<0:5.1.12-1.Final_redhat_1.1.ep7.el6
0:5.1.12-1.Final_redhat_1.1.ep7.el6
redhat/eap7-infinispan<0:8.2.9-1.Final_redhat_1.1.ep7.el6
0:8.2.9-1.Final_redhat_1.1.ep7.el6
redhat/eap7-ironjacamar<0:1.4.7-1.Final_redhat_1.1.ep7.el6
0:1.4.7-1.Final_redhat_1.1.ep7.el6
redhat/eap7-jackson-annotations<0:2.8.11-1.redhat_1.1.ep7.el6
0:2.8.11-1.redhat_1.1.ep7.el6
redhat/eap7-jackson-core<0:2.8.11-1.redhat_1.1.ep7.el6
0:2.8.11-1.redhat_1.1.ep7.el6
redhat/eap7-jackson-databind<0:2.8.11-1.redhat_1.1.ep7.el6
0:2.8.11-1.redhat_1.1.ep7.el6
redhat/eap7-jackson-jaxrs-providers<0:2.8.11-1.redhat_1.1.ep7.el6
0:2.8.11-1.redhat_1.1.ep7.el6
redhat/eap7-jackson-module-jaxb-annotations<0:2.8.11-1.redhat_1.1.ep7.el6
0:2.8.11-1.redhat_1.1.ep7.el6
redhat/eap7-jackson-modules-java8<0:2.8.11-1.redhat_1.1.ep7.el6
0:2.8.11-1.redhat_1.1.ep7.el6
redhat/eap7-jboss-logmanager<0:2.0.8-1.Final_redhat_1.1.ep7.el6
0:2.0.8-1.Final_redhat_1.1.ep7.el6
redhat/eap7-jboss-server-migration<0:1.0.3-6.Final_redhat_6.1.ep7.el6
0:1.0.3-6.Final_redhat_6.1.ep7.el6
redhat/eap7-jbossws-cxf<0:5.1.10-1.Final_redhat_1.1.ep7.el6
0:5.1.10-1.Final_redhat_1.1.ep7.el6
redhat/eap7-narayana<0:5.5.31-1.Final_redhat_1.1.ep7.el6
0:5.5.31-1.Final_redhat_1.1.ep7.el6
redhat/eap7-picketlink-bindings<0:2.5.5-10.SP9_redhat_1.1.ep7.el6
0:2.5.5-10.SP9_redhat_1.1.ep7.el6
redhat/eap7-picketlink-federation<0:2.5.5-10.SP9_redhat_1.1.ep7.el6
0:2.5.5-10.SP9_redhat_1.1.ep7.el6
redhat/eap7-resteasy<0:3.0.25-1.Final_redhat_1.1.ep7.el6
0:3.0.25-1.Final_redhat_1.1.ep7.el6
redhat/eap7-undertow<0:1.4.18-4.SP2_redhat_1.1.ep7.el6
0:1.4.18-4.SP2_redhat_1.1.ep7.el6
redhat/eap7-undertow-jastow<0:2.0.3-1.Final_redhat_1.1.ep7.el6
0:2.0.3-1.Final_redhat_1.1.ep7.el6
redhat/eap7-wildfly<0:7.1.1-4.GA_redhat_2.1.ep7.el6
0:7.1.1-4.GA_redhat_2.1.ep7.el6
redhat/eap7-wildfly-elytron<0:1.1.8-1.Final_redhat_1.1.ep7.el6
0:1.1.8-1.Final_redhat_1.1.ep7.el6
redhat/eap7-wildfly-http-client<0:1.0.9-1.Final_redhat_1.1.ep7.el6
0:1.0.9-1.Final_redhat_1.1.ep7.el6
redhat/eap7-wildfly-javadocs<0:7.1.1-3.GA_redhat_2.1.ep7.el6
0:7.1.1-3.GA_redhat_2.1.ep7.el6
redhat/eap7-wss4j<0:2.1.11-1.redhat_1.1.ep7.el6
0:2.1.11-1.redhat_1.1.ep7.el6
redhat/eap7-xml-security<0:2.0.9-1.redhat_1.1.ep7.el6
0:2.0.9-1.redhat_1.1.ep7.el6
redhat/eap7-jboss-ec2-eap<0:7.1.1-3.1.GA_redhat_3.ep7.el6
0:7.1.1-3.1.GA_redhat_3.ep7.el6
redhat/eap7-activemq-artemis<0:1.5.5.009-1.redhat_1.1.ep7.el7
0:1.5.5.009-1.redhat_1.1.ep7.el7
redhat/eap7-apache-cxf<0:3.1.13-1.redhat_1.1.ep7.el7
0:3.1.13-1.redhat_1.1.ep7.el7
redhat/eap7-glassfish-jsf<0:2.2.13-6.SP5_redhat_1.1.ep7.el7
0:2.2.13-6.SP5_redhat_1.1.ep7.el7
redhat/eap7-hibernate<0:5.1.12-1.Final_redhat_1.1.ep7.el7
0:5.1.12-1.Final_redhat_1.1.ep7.el7
redhat/eap7-infinispan<0:8.2.9-1.Final_redhat_1.1.ep7.el7
0:8.2.9-1.Final_redhat_1.1.ep7.el7
redhat/eap7-ironjacamar<0:1.4.7-1.Final_redhat_1.1.ep7.el7
0:1.4.7-1.Final_redhat_1.1.ep7.el7
redhat/eap7-jackson-annotations<0:2.8.11-1.redhat_1.1.ep7.el7
0:2.8.11-1.redhat_1.1.ep7.el7
redhat/eap7-jackson-core<0:2.8.11-1.redhat_1.1.ep7.el7
0:2.8.11-1.redhat_1.1.ep7.el7
redhat/eap7-jackson-databind<0:2.8.11-1.redhat_1.1.ep7.el7
0:2.8.11-1.redhat_1.1.ep7.el7
redhat/eap7-jackson-jaxrs-providers<0:2.8.11-1.redhat_1.1.ep7.el7
0:2.8.11-1.redhat_1.1.ep7.el7
redhat/eap7-jackson-module-jaxb-annotations<0:2.8.11-1.redhat_1.1.ep7.el7
0:2.8.11-1.redhat_1.1.ep7.el7
redhat/eap7-jackson-modules-java8<0:2.8.11-1.redhat_1.1.ep7.el7
0:2.8.11-1.redhat_1.1.ep7.el7
redhat/eap7-jboss-logmanager<0:2.0.8-1.Final_redhat_1.1.ep7.el7
0:2.0.8-1.Final_redhat_1.1.ep7.el7
redhat/eap7-jboss-server-migration<0:1.0.3-6.Final_redhat_6.1.ep7.el7
0:1.0.3-6.Final_redhat_6.1.ep7.el7
redhat/eap7-jbossws-cxf<0:5.1.10-1.Final_redhat_1.1.ep7.el7
0:5.1.10-1.Final_redhat_1.1.ep7.el7
redhat/eap7-narayana<0:5.5.31-1.Final_redhat_1.1.ep7.el7
0:5.5.31-1.Final_redhat_1.1.ep7.el7
redhat/eap7-picketlink-bindings<0:2.5.5-10.SP9_redhat_1.1.ep7.el7
0:2.5.5-10.SP9_redhat_1.1.ep7.el7
redhat/eap7-picketlink-federation<0:2.5.5-10.SP9_redhat_1.1.ep7.el7
0:2.5.5-10.SP9_redhat_1.1.ep7.el7
redhat/eap7-resteasy<0:3.0.25-1.Final_redhat_1.1.ep7.el7
0:3.0.25-1.Final_redhat_1.1.ep7.el7
redhat/eap7-undertow<0:1.4.18-4.SP2_redhat_1.1.ep7.el7
0:1.4.18-4.SP2_redhat_1.1.ep7.el7
redhat/eap7-undertow-jastow<0:2.0.3-1.Final_redhat_1.1.ep7.el7
0:2.0.3-1.Final_redhat_1.1.ep7.el7
redhat/eap7-wildfly<0:7.1.1-4.GA_redhat_2.1.ep7.el7
0:7.1.1-4.GA_redhat_2.1.ep7.el7
redhat/eap7-wildfly-elytron<0:1.1.8-1.Final_redhat_1.1.ep7.el7
0:1.1.8-1.Final_redhat_1.1.ep7.el7
redhat/eap7-wildfly-http-client<0:1.0.9-1.Final_redhat_1.1.ep7.el7
0:1.0.9-1.Final_redhat_1.1.ep7.el7
redhat/eap7-wildfly-javadocs<0:7.1.1-3.GA_redhat_2.1.ep7.el7
0:7.1.1-3.GA_redhat_2.1.ep7.el7
redhat/eap7-wss4j<0:2.1.11-1.redhat_1.1.ep7.el7
0:2.1.11-1.redhat_1.1.ep7.el7
redhat/eap7-xml-security<0:2.0.9-1.redhat_1.1.ep7.el7
0:2.0.9-1.redhat_1.1.ep7.el7
redhat/eap7-jboss-ec2-eap<0:7.1.1-3.1.GA_redhat_3.ep7.el7
0:7.1.1-3.1.GA_redhat_3.ep7.el7
redhat/undertow<1.4.18.
1.4.18.
redhat/undertow<2.0.2.
2.0.2.
redhat/undertow<1.4.24.
1.4.24.
redhat undertow<=1.4.18
redhat undertow=1.4.24
redhat undertow=2.0.2
redhat JBoss Enterprise Application Platform=7.0.0
redhat Jboss Fuse=6.0.0
redhat Virtualization=4.0
Event History
Oct 17, 2017
Data Sourced
via Red Hat·09:32 AM
DescriptionSeverityAffected Software
Mar 12, 2018
CVE Published
03:56 PM
Apr 18, 2018
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
DescriptionSeverityWeakness
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
1
What is the severity of CVE-2017-12196?
CVE-2017-12196 is rated as a medium severity vulnerability.
2
How do I fix CVE-2017-12196?
To fix CVE-2017-12196, upgrade to the appropriate version of Red Hat Undertow or other affected packages as specified in the remediation section.
3
What systems are impacted by CVE-2017-12196?
CVE-2017-12196 affects various versions of Red Hat Undertow and related components.
4
What type of attack does CVE-2017-12196 enable?
CVE-2017-12196 allows an attacker to conduct a Man-in-the-Middle (MITM) attack.
5
Is CVE-2017-12196 related to Digest authentication issues?
Yes, CVE-2017-12196 involves a vulnerability in the handling of the URI in the authorization header during Digest authentication.