What’s Vulnerable › Vulnerabilities

CVE-2023-4639: Undertow: cookie smuggling/spoofing

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-17 · updated 2026-06-17
• Weakness: CWE-444

Description

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.

Affected products

• Red Hat Migration Toolkit for Applications 6: all versions
• Red Hat Migration Toolkit for Runtimes 1 on RHEL 8: all versions — fixed in 1.2-14, 1.2-15, 1.2-16, 1.2-23
• Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8: all versions — fixed in 0:2.2.30-1.SP1_redhat_00001.1.el8eap
• Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9: all versions — fixed in 0:2.2.30-1.SP1_redhat_00001.1.el9eap
• Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7: all versions — fixed in 0:2.2.30-1.SP1_redhat_00001.1.el7eap
• Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8: all versions — fixed in 0:2.3.11-1.SP1_redhat_00001.1.el8eap
• Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9: all versions — fixed in 0:2.3.11-1.SP1_redhat_00001.1.el9eap

How to fix

Upgrade to a fixed version: Red Hat Migration Toolkit for Runtimes 1 on RHEL 8 1.2-14, 1.2-15, 1.2-16, 1.2-23; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 0:2.2.30-1.SP1_redhat_00001.1.el8eap; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 0:2.2.30-1.SP1_redhat_00001.1.el9eap; Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 0:2.2.30-1.SP1_redhat_00001.1.el7eap; Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 0:2.3.11-1.SP1_redhat_00001.1.el8eap; Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 0:2.3.11-1.SP1_redhat_00001.1.el9eap. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/errata/RHSA-2024:1674
• https://access.redhat.com/errata/RHSA-2024:1675
• https://access.redhat.com/errata/RHSA-2024:1676
• https://access.redhat.com/errata/RHSA-2024:1677
• https://access.redhat.com/errata/RHSA-2024:2763
• https://access.redhat.com/errata/RHSA-2024:2764
• https://access.redhat.com/errata/RHSA-2024:3919
• https://access.redhat.com/security/cve/CVE-2023-4639
• https://bugzilla.redhat.com/show_bug.cgi?id=2166022
• https://security.netapp.com/advisory/ntap-20250207-0001/

Get alerted when CVE-2023-4639 or the next vulnerability affects your stack