MITM Vulnerability in Undertow Package: Digest Authentication URI Mismatch
Summary
CVE-2017-12196: undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP r... Affects undertow across 3 version ranges.
< 1.4.25-1
< 6d47ee68635ab88d6cef1cb0c5ca06c8992b8323
< 8a4bfd58914ce498ea615127b2d739f92e107fc0
Fixed in 1.4.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Undertow is a flexible and performant web server designed for handling HTTP and WebSocket requests. It is often used in Java applications for its lightweight nature and ability to serve both static and dynamic content. However, certain versions of Undertow are vulnerable to a security flaw related to Digest authentication, which can lead to serious security risks if not addressed.
Vulnerability Detail
The vulnerability arises from Undertow's failure to ensure that the URI in the Authorization header matches the URI in the HTTP request line when using Digest authentication. This oversight allows attackers to perform Man-in-the-Middle (MITM) attacks, potentially gaining unauthorized access to sensitive content on the server. The affected versions include Undertow before 1.4.18.SP1, 2.0.2.Final, and 1.4.24.Final, which can expose systems to significant security threats.
How To Fix
Minimum fixed version
1.4.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade undertowTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate upgrading is not feasible, consider implementing network-level security measures such as using HTTPS to encrypt traffic, which can help mitigate the risk of MITM attacks. Additionally, ensure that all authentication mechanisms are reviewed and strengthened.
Conclusion
The vulnerability in Undertow related to Digest authentication poses a significant risk, allowing for potential MITM attacks. It is crucial for users to update to the latest patched version to safeguard their applications. Employing additional security measures can also help mitigate risks until an update can be applied.
See every vulnerability recorded for undertow →
FAQ
The CVSS score of this vulnerability is 5.9, indicating a moderate level of severity.
The affected versions of Undertow are those before 1.4.18.SP1, 2.0.2.Final, and 1.4.24.Final.
You can use Vulert, which allows you to monitor and alert for open-source vulnerabilities in your software using just a manifest file. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If exploited, this vulnerability can allow attackers to intercept and manipulate communications between clients and the server, leading to unauthorized access to sensitive data.
While updating is the best solution, you can mitigate the risk by using HTTPS to encrypt communications and reviewing your authentication processes.
Related vulnerabilities
Recent vulnerabilities recorded for undertow.
