WID-SEC-2025-1203 — NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Denial of Service

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.

Vulnerabilities 1

High 7.5

CVE-2023-5379

Undertow: ajp request closes connection exceeding maxrequestsize

A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by mod_cluster in httpd, causing JBoss EAP to close the TCP connection without returning an AJP respons…

Red Hat Red Hat Single Sign-On 7 Red Hat Data Grid 8 Red Hat JBoss Enterprise Application Platform 7 Debian Ubuntu

Dec 12, 2023

Revision history

2025-06-01 #1
Initiale Fassung

References

NetApp Security Advisory vom 2025-06-01
https://security.netapp.com/advisory/NTAP-20250530-0003