Decision Manager vulnerabilities

3 known vulnerabilities in Decision Manager from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Openshift Serverless 1 on RHEL 8: Incorrect Authorization

  CVE-2023-4853Sep 20, 2023Red HatEPSS 2.28%

  A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy alt

• 7.5 High severity

  EAP 7.4.10 release: Loop with Unreachable Exit Condition

  CVE-2023-1108Sep 14, 2023Red HatEPSS 1.77%

  A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

• 8.8 High severity

  RHPAM 7.13.1 async: Deserialization of Untrusted Data

  CVE-2022-1415Sep 11, 2023Red HatEPSS 1.04%

  A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the se