CVE-2017-12196

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the desired content on the server.

Metrics

CVSS 3.0 5.9/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-287 CWE-863

Affected software

Vendor	Product	Versions
unspecified	undertow	undertow 1.4.18.SP1; undertow 2.0.2.Final; undertow 1.4.24.Final

References

https://access.redhat.com/errata/RHSA-2018:0478Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0479Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0480Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0481Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:1525Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2405Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:3768Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12196Issue Tracking, Vendor Advisory
https://issues.jboss.org/browse/UNDERTOW-1190Issue Tracking
https://access.redhat.com/errata/RHSA-2018:0478Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0479Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0480Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0481Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:1525Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2405Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:3768Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12196Issue Tracking, Vendor Advisory
https://issues.jboss.org/browse/UNDERTOW-1190Issue Tracking

Timeline

Published: Apr 18, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-121976.5It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password CVE-2017-121999.8The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogue CVE-2017-12205.3IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to unauthorized users. The information can be CVE-2017-122006.1The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component.CVE-2017-12219.8IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it eas CVE-2017-122115.3A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could allow an authenticat CVE-2017-122126.1A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-CVE-2017-122134.3A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches cou CVE-2017-122148.8A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Cus CVE-2017-122157.1A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unaut CVE-2017-122168.8A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write CVE-2017-122175.3A vulnerability in the General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler of Cisco ASR 5500 System Architecture E