high7.5
CVE-2020-14384
A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3.
Impact
A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Jboss Enterprise Application Platform | Version 6.0.0 |
| Redhat | Jbossweb | before 7.5.31.final-redhat-3 |