Search for vulnerabilities
Vulnerability details: VCID-hwxj-2jdt-aaaj
Vulnerability ID VCID-hwxj-2jdt-aaaj
Aliases CVE-2019-10184
GHSA-w69w-jvc7-wjgv
Summary Missing Authorization in undertow
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-862 Missing Authorization
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
rhas Important https://access.redhat.com/errata/RHSA-2019:2935
rhas Important https://access.redhat.com/errata/RHSA-2019:2936
rhas Important https://access.redhat.com/errata/RHSA-2019:2937
rhas Important https://access.redhat.com/errata/RHSA-2019:2938
rhas Important https://access.redhat.com/errata/RHSA-2019:2998
rhas Important https://access.redhat.com/errata/RHSA-2019:3044
rhas Important https://access.redhat.com/errata/RHSA-2019:3045
rhas Important https://access.redhat.com/errata/RHSA-2019:3046
rhas Important https://access.redhat.com/errata/RHSA-2019:3050
cvssv3.1 6.5 https://access.redhat.com/errata/RHSA-2020:0727
rhas Important https://access.redhat.com/errata/RHSA-2020:0727
ssvc Track https://access.redhat.com/errata/RHSA-2020:0727
rhas Important https://access.redhat.com/errata/RHSA-2020:0983
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10184.json
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00535 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00673 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00673 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00673 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.00673 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.01089 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
epss 0.02569 https://api.first.org/data/v1/epss?cve=CVE-2019-10184
rhbs low https://bugzilla.redhat.com/show_bug.cgi?id=1713068
cvssv3.1 7.5 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10184
generic_textual HIGH https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10184
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-w69w-jvc7-wjgv
cvssv3.1 7.5 https://github.com/undertow-io/undertow/commit/5fa7ac68c0e4251c93056d9982db5e794e04ebfa
generic_textual HIGH https://github.com/undertow-io/undertow/commit/5fa7ac68c0e4251c93056d9982db5e794e04ebfa
cvssv3.1 7.5 https://github.com/undertow-io/undertow/pull/794
generic_textual HIGH https://github.com/undertow-io/undertow/pull/794
cvssv3.1 7.5 https://issues.redhat.com/browse/UNDERTOW-1578
generic_textual HIGH https://issues.redhat.com/browse/UNDERTOW-1578
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2019-10184
cvssv3 7.5 https://nvd.nist.gov/vuln/detail/CVE-2019-10184
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2019-10184
cvssv3.1 7.5 https://security.netapp.com/advisory/ntap-20220210-0016
generic_textual HIGH https://security.netapp.com/advisory/ntap-20220210-0016
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10184.json
https://api.first.org/data/v1/epss?cve=CVE-2019-10184
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10184
https://github.com/undertow-io/undertow/commit/5fa7ac68c0e4251c93056d9982db5e794e04ebfa
https://github.com/undertow-io/undertow/pull/794
https://issues.redhat.com/browse/UNDERTOW-1578
https://security.netapp.com/advisory/ntap-20220210-0016
https://security.netapp.com/advisory/ntap-20220210-0016/
1713068 https://bugzilla.redhat.com/show_bug.cgi?id=1713068
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
cpe:2.3:a:redhat:jboss_data_grid:-:*:*:*:text-only:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:jboss_data_grid:-:*:*:*:text-only:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*
cpe:2.3:a:redhat:openshift_application_runtimes:1.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift_application_runtimes:1.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:text-only:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:text-only:*:*:*
cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*
cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*
CVE-2019-10184 https://nvd.nist.gov/vuln/detail/CVE-2019-10184
GHSA-w69w-jvc7-wjgv https://github.com/advisories/GHSA-w69w-jvc7-wjgv
RHSA-2019:2935 https://access.redhat.com/errata/RHSA-2019:2935
RHSA-2019:2936 https://access.redhat.com/errata/RHSA-2019:2936
RHSA-2019:2937 https://access.redhat.com/errata/RHSA-2019:2937
RHSA-2019:2938 https://access.redhat.com/errata/RHSA-2019:2938
RHSA-2019:2998 https://access.redhat.com/errata/RHSA-2019:2998
RHSA-2019:3044 https://access.redhat.com/errata/RHSA-2019:3044
RHSA-2019:3045 https://access.redhat.com/errata/RHSA-2019:3045
RHSA-2019:3046 https://access.redhat.com/errata/RHSA-2019:3046
RHSA-2019:3050 https://access.redhat.com/errata/RHSA-2019:3050
RHSA-2020:0727 https://access.redhat.com/errata/RHSA-2020:0727
RHSA-2020:0983 https://access.redhat.com/errata/RHSA-2020:0983
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://access.redhat.com/errata/RHSA-2020:0727
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-29T16:04:44Z/ Found at https://access.redhat.com/errata/RHSA-2020:0727
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10184.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10184
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/undertow-io/undertow/commit/5fa7ac68c0e4251c93056d9982db5e794e04ebfa
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/undertow-io/undertow/pull/794
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://issues.redhat.com/browse/UNDERTOW-1578
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2019-10184
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2019-10184
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2019-10184
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://security.netapp.com/advisory/ntap-20220210-0016
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.77621
EPSS Score 0.00535
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.