REDHAT-BUG-1436163: Medium severity Red Hat Undertow vulnerability
It was found that code that parsed the HTTP request line in undertow permitted invalid characters which results into HTTP request smuggling vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1436163?
The severity of REDHAT-BUG-1436163 is considered critical due to the potential for HTTP request smuggling.
How do I fix REDHAT-BUG-1436163?
To fix REDHAT-BUG-1436163, update to a patched version of Red Hat Undertow that addresses the vulnerability.
Which versions of Red Hat Undertow are affected by REDHAT-BUG-1436163?
All versions of Red Hat Undertow prior to the patches addressing REDHAT-BUG-1436163 are affected.
What is HTTP request smuggling in the context of REDHAT-BUG-1436163?
HTTP request smuggling is a vulnerability where an attacker can manipulate HTTP requests to bypass security protections and potentially exploit backend servers.
Is there a known exploit for REDHAT-BUG-1436163?
As of now, there are no known public exploits specifically for REDHAT-BUG-1436163, but it is classified as critical and should be addressed immediately.