Advisories · Technology
Red Hat build of Apache Camel - HawtIO 4.
Every CVE that names Red Hat build of Apache Camel - HawtIO 4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload
- Red Hat JBoss Enterprise Application Platform 8.1.8.GA
- Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
- Denial of service
- CVSS 5.5 Medium
Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level
- Red Hat build of Apache Camel - HawtIO 4
- Information disclosure
- CVSS 6.3 Medium
Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname
- Red Hat build of Apache Camel - HawtIO 4
- CWE-441
- CVSS 9.9 CriticalCritical · CVSS 9+
Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificate issuance to namespace edit users
- Red Hat build of Apache Camel - HawtIO 4
- Weak cryptography or TLS
- CVSS 8.2 High
Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccount
- Red Hat build of Apache Camel - HawtIO 4
- Privilege escalation
- CVSS 7.5 High
Undertow-core: undertow: denial of service via websocket permessage-deflate processing
- Red Hat JBoss Enterprise Application Platform 8.1.8.GA
- Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
- Denial of service
- CVSS 5.3 Medium
Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap
- Red Hat JBoss Enterprise Application Platform 8.1.8.GA
- Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
- HTTP request smuggling