Migration Toolkit for Runtimes 1 on RHEL 8 vulnerabilities

2 known vulnerabilities in Migration Toolkit for Runtimes 1 on RHEL 8 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Migration Toolkit for Runtimes 1 on RHEL 8: Inconsistent Interpretation of HTTP Requests

  CVE-2023-4639Nov 17, 2024Red HatEPSS 1.09%

  A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cook

• 8.1 High severity

  Migration Toolkit for Runtimes 1 on RHEL 8: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-1132Apr 17, 2024Red HatEPSS 1.55%

  A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct