How severe is CVE-2017-12196?

CVE-2017-12196 has a CVSS 3.x base score of 4.8, rated medium severity. It is exploitable over network with high attack complexity, requires low privileges and user interaction. Impact on confidentiality is high, integrity none, and availability none.

Is CVE-2017-12196 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (79th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2017-12196?

CVE-2017-12196 primarily affects Redhat Undertow. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2017-12196?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2017-12196 published?

CVE-2017-12196 was published on 2018-04-18 and last updated on 2026-06-17.

CVE-2017-12196

CVE-2017-12196 is a medium-severity vulnerability in Redhat Undertow with a CVSS 3.x base score of 4.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-863.

Key facts

Severity: Medium (CVSS 3.x base score 4.8)
CVSS v2: 4.3
EPSS exploit prediction: 2% (79th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-863
Affected product: Redhat Undertow
Published: 2018-04-18
Last modified: 2026-06-17

Description

undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the desired content on the server.

Frequently asked questions

What is CVE-2017-12196?: undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the desired content on the server.
How severe is CVE-2017-12196?: CVE-2017-12196 has a CVSS 3.x base score of 4.8, rated medium severity. It is exploitable over network with high attack complexity, requires low privileges and user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2017-12196 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (79th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2017-12196?: CVE-2017-12196 primarily affects Redhat Undertow. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2017-12196?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2017-12196 published?: CVE-2017-12196 was published on 2018-04-18 and last updated on 2026-06-17.

References

Affected products (6)

cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:undertow:1.4.24:*:*:*:*:*:*:*
cpe:2.3:a:redhat:undertow:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_fuse:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*

More vulnerabilities in Redhat Undertow

CVE-2019-10212 — Critical (CVSS 9.8): A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an…
CVE-2019-3888 — Critical (CVSS 9.8): A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials…
CVE-2025-12543 — Critical (CVSS 9.6): A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.…
CVE-2026-28369 — High (CVSS 8.7): A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or…
CVE-2026-28368 — High (CVSS 8.7): A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where…
CVE-2026-28367 — High (CVSS 8.7): A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block…

All CVEs affecting Redhat Undertow →

Other CWE-863 (Incorrect Authorization) vulnerabilities

CVE-2026-48286 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization…
CVE-2026-48303 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization…
CVE-2026-44330 — Critical (CVSS 10.0): free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the…
CVE-2026-46595 — Critical (CVSS 10.0): Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…
CVE-2026-33105 — Critical (CVSS 10.0): Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over…
CVE-2026-32213 — Critical (CVSS 10.0): Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Browse all CWE-863 (Incorrect Authorization) vulnerabilities →