← Database

CVE-2021-3859

HIGH CVSS: 7.5 Published: 2022-08-26 Modified: 2026-06-17

Description

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.

Affected Platforms

Redhat UndertowRedhat Single Sign-OnNetapp Oncommand InsightNetapp Cloud Secure AgentNetapp Oncommand Workflow AutomationRedhat Jboss Enterprise Application Platform

Weakness Type

CWE-214, CWE-668

References