CVE-2018-14642CWE-200

An information leak vulnerability was found in Undertow

Medium · published September 18, 2018

CVSS v3.0
5.3
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02114 · 81.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2018-09-18T13:00Z
EPSS history
Timeline
  • 18 SEP 13:00Z
    An information leak vulnerability was found in Undertow
    cvelistv5