vulnerability

Red Hat JBoss EAP: CVE-2021-3859: Invocation of Process Using Visible Sensitive Information

Name: Red Hat JBoss EAP: CVE-2021-3859: Invocation of Process Using Visible Sensitive Information
Creator: Red Hat
Published: 2022-02-01T00:00:00.000Z
Keywords: CVE, CWE-214, CWE-668, Red Hat JBoss EAP, 2021, 3859, Invocation of Process Using Visible Sensitive Information, red-hat-jboss-eap-upgrade-latest, Severity 8

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Feb 1, 2022

Added

Sep 19, 2024

Modified

Mar 25, 2026

Description

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.. A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.

Solution

red-hat-jboss-eap-upgrade-latest

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report