CVE-2017-6910

The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS Edition before 4.0.5 hotfix-15, 4.0.6 before hotfix-4, 4.0.7, 4.0.9 before hotfix-19, 4.4.x before 4.4.2 hotfix-1, 4.5.x before 4.5.3 hotfix-1, and Gateway Community and Enterprise Editions before 5.6.0 allow remote attackers to bypass intended access restrictions and obtain sensitive information via vectors related to HTTP request handling.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-04-12

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Kaazing Gateway (Kaazing)
• Kaazing Websocket Gateway (Tenefit)

References

• https://support.kaazing.com/hc/en-us/articles/115004752368