high7.5
CVE-2014-6309
The HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4 and Gateway - JMS Edition 4.0.2, 4.0.3, and 4.0.4 allow remot…
Impact
The HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4 and Gateway - JMS Edition 4.0.2, 4.0.3, and 4.0.4 allow remote attackers to obtain sensitive information via vectors related to HTTP request handling.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenefit | Kaazing Websocket Gateway | Versions 4.0.2, 4.0.3, 4.0.4 |