https://bugzilla.redhat.com/show_bug.cgi?id=1541996
Hooman Broujerdi <hghasemb(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0129,reported=20180129,sour |0129,reported=20180129,sour
|ce=internet,cvss3=6.5/CVSS: |ce=internet,cvss3=6.5/CVSS:
|3.0/AV:N/AC:L/PR:L/UI:N/S:U |3.0/AV:N/AC:L/PR:L/UI:N/S:U
|/C:N/I:H/A:N,cwe=CWE-20,fus |/C:N/I:H/A:N,cwe=CWE-20,fus
|e-6/spring-security-core=ne |e-6/spring-security-core=no
|w,fedora-all/springframewor |taffected,fedora-all/spring
|k-security=affected |framework-security=affected
--- Comment #2 from Hooman Broujerdi <hghasemb(a)redhat.com> ---
Jetty container in JBoss Fuse complies with servlet specification and does not
return path parameters which is a root cause of this flaw, so JBoss Fuse is not
affected.
--
You are receiving this mail because:
You are on the CC list for the bug.