CVE-2018-1295

Related Files

Red Hat Security Advisory 2018-2405-01

Posted Aug 15, 2018

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2405-01 - Red Hat Fuse Integration Services provides a set of tools and containerized xPaaS images that enable development, deployment, and management of integration microservices within OpenShift. Security fix: undertow: Client can use bogus uri in Digest authentication spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code Issues addressed include bypass, deserialization, and file disclosure vulnerabilities.

tags | advisory, java, arbitrary, vulnerability

systems | linux, redhat

advisories | CVE-2017-12196, CVE-2017-8046, CVE-2018-1199, CVE-2018-1295, CVE-2018-9159

SHA-256 | 22636c0c9a281b66fbd3d47e07d655863a099b143f205af9a4652c4f6965646b

Download | Favorite | View