CVE-2022-4492

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2022-4492	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2153260	Issue Tracking Vendor Advisory
https://security.netapp.com/advisory/ntap-20230324-0002/

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:redhat:build_of_quarkus:-:::::::*
	cpe:2.3:a:redhat:integration_camel_for_spring_boot:-:::::::*
	cpe:2.3:a:redhat:integration_camel_k:-:::::::*
	cpe:2.3:a:redhat:integration_service_registry:-:::::::*
	cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:::::::*
	cpe:2.3:a:redhat:jboss_fuse:7.0.0:::::::*
	cpe:2.3:a:redhat:migration_toolkit_for_applications:6.0:::::::*
	cpe:2.3:a:redhat:migration_toolkit_for_runtimes:-:::::::*
	cpe:2.3:a:redhat:single_sign-on:7.0:::::::*
	cpe:2.3:a:redhat:undertow:2.7.0:::::::*

History

No history.

Information

Published : 2023-02-23 20:15

Updated : 2024-02-28 19:51

NVD link : CVE-2022-4492

Mitre link : CVE-2022-4492

CVE.ORG link : CVE-2022-4492

JSON object : View

Products Affected

redhat

single_sign-on
undertow
integration_camel_k
migration_toolkit_for_applications
integration_service_registry
build_of_quarkus
jboss_fuse
migration_toolkit_for_runtimes
jboss_enterprise_application_platform
integration_camel_for_spring_boot

CWE

NVD-CWE-noinfo

{"id": "CVE-2022-4492", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-02-23T20:15:12.680", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2022-4492", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2153260", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://security.netapp.com/advisory/ntap-20230324-0002/", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol."}], "lastModified": "2023-03-24T16:15:08.350", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:build_of_quarkus:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE29B9D6-63DC-4779-ACE8-4E51E6A0AF37"}, {"criteria": "cpe:2.3:a:redhat:integration_camel_for_spring_boot:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78698F40-0777-4990-822D-02E1B5D0E2C0"}, {"criteria": "cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B87C8AD3-8878-4546-86C2-BF411876648C"}, {"criteria": "cpe:2.3:a:redhat:integration_service_registry:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF03BDE8-602D-4DEE-BA5B-5B20FDF47741"}, {"criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72A54BDA-311C-413B-8E4D-388AD65A170A"}, {"criteria": "cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B40CCE4F-EA2C-453D-BB76-6388767E5C6D"}, {"criteria": "cpe:2.3:a:redhat:migration_toolkit_for_applications:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C2E7E3C-A507-4AB2-97E5-4944D8775CF7"}, {"criteria": "cpe:2.3:a:redhat:migration_toolkit_for_runtimes:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F979A5E3-7FFB-45F1-9847-FFBAF0B12067"}, {"criteria": "cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890"}, {"criteria": "cpe:2.3:a:redhat:undertow:2.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0FA5F7F-CCE8-4DF0-8F9D-516F72C30A45"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}