CVE & CISA-KEV Catalog

CVE-2022-4492

HIGH
7.5
CVSS v3
NVD

Description

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

How to fix

Remediation Available
undertowDebian
Fixed in:2.3.8-2CVE-2022-4492
eap7-glassfish-elRocky
Fixed in:0:3.0.1-4.b08_redhat_00005.1.ep7.el7RHSA-2025:9582
Fixed in:0:3.0.1-4.b08_redhat_00005.1.ep7.el7RHSA-2025:9582
eap7-glassfish-elRed Hat / RHEL
Fixed in:0:3.0.1-4.b08_redhat_00005.1.ep7.el7RHSA-2025:9582
Fixed in:0:3.0.1-4.b08_redhat_00005.1.ep7.el7RHSA-2025:9582
eap7-glassfish-el-implRocky
Fixed in:0:3.0.1-4.b08_redhat_00005.1.ep7.el7RHSA-2025:9582
eap7-glassfish-el-implRed Hat / RHEL
Fixed in:0:3.0.1-4.b08_redhat_00005.1.ep7.el7RHSA-2025:9582
eap7-hibernateRed Hat / RHEL
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernateRocky
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-coreRocky
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-coreRed Hat / RHEL
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-entitymanagerRocky
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-entitymanagerRed Hat / RHEL
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-enversRocky
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-enversRed Hat / RHEL
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-infinispanRed Hat / RHEL
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-infinispanRocky
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-java8Rocky
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-hibernate-java8Red Hat / RHEL
Fixed in:0:5.1.17-3.Final_redhat_00004.1.ep7.el7RHSA-2025:9582
eap7-jackson-annotationsRed Hat / RHEL
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-annotationsRocky
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-coreRed Hat / RHEL
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-coreRocky
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-databindRed Hat / RHEL
Fixed in:0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7RHSA-2025:9582
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7RHSA-2025:9582
eap7-jackson-databindRocky
Fixed in:0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7RHSA-2025:9582
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7RHSA-2025:9582
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-datatype-jdk8Rocky
Fixed in:0:2.10.4-2.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-datatype-jdk8Red Hat / RHEL
Fixed in:0:2.10.4-2.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-datatype-jsr310Red Hat / RHEL
Fixed in:0:2.10.4-2.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-datatype-jsr310Rocky
Fixed in:0:2.10.4-2.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-jaxrs-baseRocky
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-jaxrs-baseRed Hat / RHEL
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-jaxrs-json-providerRocky
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-jaxrs-json-providerRed Hat / RHEL
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-jaxrs-providersRed Hat / RHEL
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-jaxrs-providersRocky
Fixed in:0:2.10.4-3.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-module-jaxb-annotationsRocky
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-module-jaxb-annotationsRed Hat / RHEL
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-modules-baseRed Hat / RHEL
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-modules-baseRocky
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.10.4-5.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-modules-java8Red Hat / RHEL
Fixed in:0:2.10.4-2.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.10.4-2.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jackson-modules-java8Rocky
Fixed in:0:2.10.4-2.redhat_00006.1.el7eapRHSA-2025:9583
Fixed in:0:2.10.4-2.redhat_00006.1.el7eapRHSA-2025:9583
eap7-jboss-ejb-clientRocky
Fixed in:0:4.0.12-1.Final_redhat_00002.1.ep7.el7RHSA-2025:9582
Fixed in:0:4.0.12-1.Final_redhat_00002.1.ep7.el7RHSA-2025:9582
eap7-jboss-ejb-clientRed Hat / RHEL
Fixed in:0:4.0.12-1.Final_redhat_00002.1.ep7.el7RHSA-2025:9582
Fixed in:0:4.0.12-1.Final_redhat_00002.1.ep7.el7RHSA-2025:9582
eap7-jboss-server-migrationRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migrationRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-cliRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-cliRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-coreRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-coreRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap6.4Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap6.4Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap6.4-to-eap7.3Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap6.4-to-eap7.3Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.0Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.0Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.1Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.1Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.2Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.2Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.2-to-eap7.3Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.2-to-eap7.3Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.3-serverRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-eap7.3-serverRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly10.0Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly10.0Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly10.1Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly10.1Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly11.0Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly11.0Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly12.0Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly12.0Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly13.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly13.0-serverRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly14.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly14.0-serverRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly15.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly15.0-serverRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly16.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly16.0-serverRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly17.0-serverRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly17.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly18.0-serverRed Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly18.0-serverRocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly8.2Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly8.2Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly9.0Rocky
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-jboss-server-migration-wildfly9.0Red Hat / RHEL
Fixed in:0:1.7.2-16.Final_redhat_00017.1.el7eapRHSA-2025:9583
eap7-nettyRocky
Fixed in:0:4.1.63-5.Final_redhat_00003.1.el7eapRHSA-2025:9583
Fixed in:0:4.1.63-5.Final_redhat_00003.1.el7eapRHSA-2025:9583
Fixed in:0:4.1.63-2.Final_redhat_00003.1.ep7.el7RHSA-2025:9582
Fixed in:0:4.1.63-2.Final_redhat_00003.1.ep7.el7RHSA-2025:9582
eap7-nettyRed Hat / RHEL
Fixed in:0:4.1.63-5.Final_redhat_00003.1.el7eapRHSA-2025:9583
Fixed in:0:4.1.63-2.Final_redhat_00003.1.ep7.el7RHSA-2025:9582
Fixed in:0:4.1.63-2.Final_redhat_00003.1.ep7.el7RHSA-2025:9582
Fixed in:0:4.1.63-5.Final_redhat_00003.1.el7eapRHSA-2025:9583
eap7-netty-allRed Hat / RHEL
Fixed in:0:4.1.63-5.Final_redhat_00003.1.el7eapRHSA-2025:9583
Fixed in:0:4.1.63-2.Final_redhat_00003.1.ep7.el7RHSA-2025:9582
eap7-netty-allRocky
Fixed in:0:4.1.63-2.Final_redhat_00003.1.ep7.el7RHSA-2025:9582
Fixed in:0:4.1.63-5.Final_redhat_00003.1.el7eapRHSA-2025:9583
eap7-undertowRed Hat / RHEL
Fixed in:0:1.4.18-16.SP14_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:2.0.41-4.SP5_redhat_00001.1.el7eapRHSA-2025:9583
Fixed in:0:2.0.41-4.SP5_redhat_00001.1.el7eapRHSA-2025:9583
Fixed in:0:1.4.18-16.SP14_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-undertowRocky
Fixed in:0:2.0.41-4.SP5_redhat_00001.1.el7eapRHSA-2025:9583
Fixed in:0:2.0.41-4.SP5_redhat_00001.1.el7eapRHSA-2025:9583
Fixed in:0:1.4.18-16.SP14_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.4.18-16.SP14_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildflyRed Hat / RHEL
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
Fixed in:0:7.1.11-4.GA_redhat_00002.1.ep7.el7RHSA-2025:9582
Fixed in:0:7.1.11-4.GA_redhat_00002.1.ep7.el7RHSA-2025:9582
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
eap7-wildflyRocky
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
Fixed in:0:7.1.11-4.GA_redhat_00002.1.ep7.el7RHSA-2025:9582
Fixed in:0:7.1.11-4.GA_redhat_00002.1.ep7.el7RHSA-2025:9582
eap7-wildfly-elytronRed Hat / RHEL
Fixed in:0:1.1.14-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.10.17-1.Final_redhat_00001.1.el7eapRHSA-2025:9583
Fixed in:0:1.1.14-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.10.17-1.Final_redhat_00001.1.el7eapRHSA-2025:9583
eap7-wildfly-elytronRocky
Fixed in:0:1.1.14-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.10.17-1.Final_redhat_00001.1.el7eapRHSA-2025:9583
Fixed in:0:1.10.17-1.Final_redhat_00001.1.el7eapRHSA-2025:9583
Fixed in:0:1.1.14-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-elytron-toolRocky
Fixed in:0:1.10.17-1.Final_redhat_00001.1.el7eapRHSA-2025:9583
eap7-wildfly-elytron-toolRed Hat / RHEL
Fixed in:0:1.10.17-1.Final_redhat_00001.1.el7eapRHSA-2025:9583
eap7-wildfly-http-clientRed Hat / RHEL
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-http-clientRocky
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-http-client-commonRed Hat / RHEL
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-http-client-commonRocky
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-http-ejb-clientRocky
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-http-ejb-clientRed Hat / RHEL
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-http-naming-clientRocky
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-http-naming-clientRed Hat / RHEL
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-http-transaction-clientRocky
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-http-transaction-clientRed Hat / RHEL
Fixed in:0:1.0.21-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-java-jdk11Rocky
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
eap7-wildfly-java-jdk11Red Hat / RHEL
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
eap7-wildfly-java-jdk8Red Hat / RHEL
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
eap7-wildfly-java-jdk8Rocky
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
eap7-wildfly-javadocsRocky
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
eap7-wildfly-javadocsRed Hat / RHEL
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
eap7-wildfly-modulesRocky
Fixed in:0:7.1.11-4.GA_redhat_00002.1.ep7.el7RHSA-2025:9582
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
eap7-wildfly-modulesRed Hat / RHEL
Fixed in:0:7.3.14-3.GA_redhat_00002.1.el7eapRHSA-2025:9583
Fixed in:0:7.1.11-4.GA_redhat_00002.1.ep7.el7RHSA-2025:9582
eap7-wildfly-naming-clientRocky
Fixed in:0:1.0.13-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.0.13-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-naming-clientRed Hat / RHEL
Fixed in:0:1.0.13-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.0.13-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-opensslRed Hat / RHEL
Fixed in:0:1.0.12-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.0.12-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-opensslRocky
Fixed in:0:1.0.12-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.0.12-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-openssl-javaRed Hat / RHEL
Fixed in:0:1.0.12-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-openssl-javaRocky
Fixed in:0:1.0.12-1.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-openssl-linuxRocky
Fixed in:0:1.0.12-6.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.0.12-6.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-openssl-linuxRed Hat / RHEL
Fixed in:0:1.0.12-6.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
Fixed in:0:1.0.12-6.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-openssl-linux-debuginfoRed Hat / RHEL
Fixed in:0:1.0.12-6.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
eap7-wildfly-openssl-linux-debuginfoRocky
Fixed in:0:1.0.12-6.Final_redhat_00001.1.ep7.el7RHSA-2025:9582
mta/mtaRed Hat / RHEL
Fixed in:ui-rhel9@sha256:d393b1ae0968bd8710a8e58c0e74d293c58b804fb5e6cbb9434520c888a80587_amd64RHSA-2023:4627
Fixed in:pathfinder-rhel9@sha256:8cbce6bd4bc17d78e532477bbb4d8c6d02a5f0d0a823b6a9f20c072ff66fdb26_amd64RHSA-2023:4627
Fixed in:rhel8-operator@sha256:c33386019c431eaeac3559226353b5a50cd54c03a2975bde02f6a66427fca893_amd64RHSA-2023:4627
Fixed in:operator-bundle@sha256:3165133f54da89d0e2b897a8069db7d17a4d956b712f84eb320c083506c24469_amd64RHSA-2023:4627
Fixed in:hub-rhel9@sha256:5cc1613cb869bab75faa5ea2798ab5f34238192b397d3c942789b4242a8a815a_amd64RHSA-2023:4627
mta/mtaRocky
Fixed in:hub-rhel9@sha256:5cc1613cb869bab75faa5ea2798ab5f34238192b397d3c942789b4242a8a815a_amd64RHSA-2023:4627
Fixed in:operator-bundle@sha256:3165133f54da89d0e2b897a8069db7d17a4d956b712f84eb320c083506c24469_amd64RHSA-2023:4627
Fixed in:rhel8-operator@sha256:c33386019c431eaeac3559226353b5a50cd54c03a2975bde02f6a66427fca893_amd64RHSA-2023:4627
Fixed in:pathfinder-rhel9@sha256:8cbce6bd4bc17d78e532477bbb4d8c6d02a5f0d0a823b6a9f20c072ff66fdb26_amd64RHSA-2023:4627
Fixed in:ui-rhel9@sha256:d393b1ae0968bd8710a8e58c0e74d293c58b804fb5e6cbb9434520c888a80587_amd64RHSA-2023:4627
mta/mta-windupRed Hat / RHEL
Fixed in:addon-rhel9@sha256:5a6e25695fbf883d6c02cd8b933a2a482e3e18ec70e86be0db576a107ff65a84_amd64RHSA-2023:4627
mta/mta-windupRocky
Fixed in:addon-rhel9@sha256:5a6e25695fbf883d6c02cd8b933a2a482e3e18ec70e86be0db576a107ff65a84_amd64RHSA-2023:4627
mtr/mtrRed Hat / RHEL
Fixed in:operator-bundle@sha256:8b608899c571a4729a241f041bfaa65c183c9e81dc1731e650f0db84c24fc274_s390xRHSA-2023:3813
Fixed in:rhel8-operator@sha256:f9b5c11144415597762706d93d1f90b2b684dbcab4dd5b83204831d0a3bf529f_s390xRHSA-2023:3813
Fixed in:operator-bundle@sha256:e43184e29882918430c515933e4669185cb49764bed4ef5da7ce2580f0a79ecd_amd64RHSA-2023:3813
Fixed in:rhel8-operator@sha256:93db684ab05b08d7a6b55e19e63934b85a758bc0b29b9c49469278ce9f6b456e_amd64RHSA-2023:3813
Fixed in:operator-bundle@sha256:6e4522f5ec12c49e5aad88536accb10eef503e1cabc1abad07ae7a746c03c676_arm64RHSA-2023:3813
Fixed in:operator-bundle@sha256:70c1c24245ce7975c50055f0a9f616cd9db4a6325c9aadc42e80a7618b7a74dd_ppc64leRHSA-2023:3813
Fixed in:rhel8-operator@sha256:6f2d9ac73482bc381c3f87590954ecb0632ccfe3c50b1f96d9f637d1e60101b3_arm64RHSA-2023:3813
Fixed in:rhel8-operator@sha256:12e80abe7c02cfbd1a179cb304bef58b72729f5821113c98e2230dda517ef4ec_ppc64leRHSA-2023:3813
mtr/mtrRocky
Fixed in:rhel8-operator@sha256:6f2d9ac73482bc381c3f87590954ecb0632ccfe3c50b1f96d9f637d1e60101b3_arm64RHSA-2023:3813
Fixed in:rhel8-operator@sha256:12e80abe7c02cfbd1a179cb304bef58b72729f5821113c98e2230dda517ef4ec_ppc64leRHSA-2023:3813
Fixed in:operator-bundle@sha256:e43184e29882918430c515933e4669185cb49764bed4ef5da7ce2580f0a79ecd_amd64RHSA-2023:3813
Fixed in:rhel8-operator@sha256:93db684ab05b08d7a6b55e19e63934b85a758bc0b29b9c49469278ce9f6b456e_amd64RHSA-2023:3813
Fixed in:operator-bundle@sha256:70c1c24245ce7975c50055f0a9f616cd9db4a6325c9aadc42e80a7618b7a74dd_ppc64leRHSA-2023:3813
Fixed in:operator-bundle@sha256:6e4522f5ec12c49e5aad88536accb10eef503e1cabc1abad07ae7a746c03c676_arm64RHSA-2023:3813
Fixed in:rhel8-operator@sha256:f9b5c11144415597762706d93d1f90b2b684dbcab4dd5b83204831d0a3bf529f_s390xRHSA-2023:3813
Fixed in:operator-bundle@sha256:8b608899c571a4729a241f041bfaa65c183c9e81dc1731e650f0db84c24fc274_s390xRHSA-2023:3813
mtr/mtr-webRocky
Fixed in:container-rhel8@sha256:bc3f7a7cda2b40adc2561c3dd7e2193d1da899ad6a499713bf54f4cfa8055f20_amd64RHSA-2023:3813
Fixed in:container-rhel8@sha256:fd35bbd776cd186298a621f8122cdaa059dfa0d480eae08127e963faa5e26680_s390xRHSA-2023:3813
Fixed in:container-rhel8@sha256:74c5ddfc32d28a9f7a08364910413ffcae2453faaded21befcf28840414c968b_ppc64leRHSA-2023:3813
mtr/mtr-webRed Hat / RHEL
Fixed in:container-rhel8@sha256:fd35bbd776cd186298a621f8122cdaa059dfa0d480eae08127e963faa5e26680_s390xRHSA-2023:3813
Fixed in:container-rhel8@sha256:74c5ddfc32d28a9f7a08364910413ffcae2453faaded21befcf28840414c968b_ppc64leRHSA-2023:3813
Fixed in:container-rhel8@sha256:bc3f7a7cda2b40adc2561c3dd7e2193d1da899ad6a499713bf54f4cfa8055f20_amd64RHSA-2023:3813
mtr/mtr-web-executorRocky
Fixed in:container-rhel8@sha256:42ff12e2c4d6308a6a5d7cb262c7b20e6c2df43542249edc327a35ecccbf21e4_s390xRHSA-2023:3813
Fixed in:container-rhel8@sha256:dedc08bd847e3dfe8c3789ed17844f15e75edf3a4bf8786f6a7f897f6ca66d7f_arm64RHSA-2023:3813
Fixed in:container-rhel8@sha256:be070c36939408f3ebe40612e239be07ea495d3a4f838e84db43e2d73dc3987f_amd64RHSA-2023:3813
Fixed in:container-rhel8@sha256:5c27fad928e344f4b26b6fb68b3c21adfe695ee1707063d959fa722d72d7eef1_ppc64leRHSA-2023:3813
mtr/mtr-web-executorRed Hat / RHEL
Fixed in:container-rhel8@sha256:42ff12e2c4d6308a6a5d7cb262c7b20e6c2df43542249edc327a35ecccbf21e4_s390xRHSA-2023:3813
Fixed in:container-rhel8@sha256:5c27fad928e344f4b26b6fb68b3c21adfe695ee1707063d959fa722d72d7eef1_ppc64leRHSA-2023:3813
Fixed in:container-rhel8@sha256:be070c36939408f3ebe40612e239be07ea495d3a4f838e84db43e2d73dc3987f_amd64RHSA-2023:3813
Fixed in:container-rhel8@sha256:dedc08bd847e3dfe8c3789ed17844f15e75edf3a4bf8786f6a7f897f6ca66d7f_arm64RHSA-2023:3813
rh-sso-7/sso76Red Hat / RHEL
Fixed in:openshift-rhel8@sha256:e7d2be6b039deff86bf9fa7c0285583f3769d4f39be9471ba9906fe8e2fb00e5_s390xRHSA-2023:2710
Fixed in:openshift-rhel8@sha256:c3e0e8203d2a7dd9e3bc729b3fd28b15558b7e6d25c3fb538687be54f0ec5568_ppc64leRHSA-2023:2710
Fixed in:openshift-rhel8@sha256:9079e1080d36270fbd3529a221a014859042ebcc627243f015cbbdd3bdc04275_amd64RHSA-2023:2710
rh-sso-7/sso76Rocky
Fixed in:openshift-rhel8@sha256:e7d2be6b039deff86bf9fa7c0285583f3769d4f39be9471ba9906fe8e2fb00e5_s390xRHSA-2023:2710
Fixed in:openshift-rhel8@sha256:c3e0e8203d2a7dd9e3bc729b3fd28b15558b7e6d25c3fb538687be54f0ec5568_ppc64leRHSA-2023:2710
Fixed in:openshift-rhel8@sha256:9079e1080d36270fbd3529a221a014859042ebcc627243f015cbbdd3bdc04275_amd64RHSA-2023:2710
rh-sso7-keycloakRed Hat / RHEL
Fixed in:0:18.0.7-1.redhat_00001.1.el7ssoRHSA-2023:2705
Fixed in:0:18.0.7-1.redhat_00001.1.el7ssoRHSA-2023:2705
Fixed in:0:18.0.7-1.redhat_00001.1.el8ssoRHSA-2023:2706
Fixed in:0:18.0.7-1.redhat_00001.1.el8ssoRHSA-2023:2706
Fixed in:0:18.0.7-1.redhat_00001.1.el9ssoRHSA-2023:2707
Fixed in:0:18.0.7-1.redhat_00001.1.el9ssoRHSA-2023:2707
rh-sso7-keycloakRocky
Fixed in:0:18.0.7-1.redhat_00001.1.el7ssoRHSA-2023:2705
Fixed in:0:18.0.7-1.redhat_00001.1.el7ssoRHSA-2023:2705
Fixed in:0:18.0.7-1.redhat_00001.1.el8ssoRHSA-2023:2706
Fixed in:0:18.0.7-1.redhat_00001.1.el8ssoRHSA-2023:2706
Fixed in:0:18.0.7-1.redhat_00001.1.el9ssoRHSA-2023:2707
Fixed in:0:18.0.7-1.redhat_00001.1.el9ssoRHSA-2023:2707
rh-sso7-keycloak-serverRocky
Fixed in:0:18.0.7-1.redhat_00001.1.el7ssoRHSA-2023:2705
Fixed in:0:18.0.7-1.redhat_00001.1.el8ssoRHSA-2023:2706
Fixed in:0:18.0.7-1.redhat_00001.1.el9ssoRHSA-2023:2707
rh-sso7-keycloak-serverRed Hat / RHEL
Fixed in:0:18.0.7-1.redhat_00001.1.el7ssoRHSA-2023:2705
Fixed in:0:18.0.7-1.redhat_00001.1.el8ssoRHSA-2023:2706
Fixed in:0:18.0.7-1.redhat_00001.1.el9ssoRHSA-2023:2707

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityHigh
AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploit Intelligence

0.60%probability of exploitation in 30 days
44thpercentile

Moderate risk: more likely to be exploited than 44% of all known CVEs.

References

Related Vulnerabilities

Other CWE-918 (Server-Side Request Forgery (SSRF)) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2024-21893High8.2100%KEV + Ransom-
CVE-2021-40438Critical9.0100%KEVFix
CVE-2021-34473Critical9.1100%KEV + RansomFix
CVE-2021-26855Critical9.1100%KEV + RansomFix
CVE-2021-21985Critical9.8100%KEV + RansomFix
CVE-2022-41040High8.8100%KEV + RansomFix
Embed a live status badge for CVE-2022-4492
CVE-2022-4492 severity badge

Markdown

[![CVE-2022-4492](https://tridentstack.com/cve/badge/CVE-2022-4492.svg)](https://tridentstack.com/cve/CVE-2022-4492)

HTML

<a href="https://tridentstack.com/cve/CVE-2022-4492"><img src="https://tridentstack.com/cve/badge/CVE-2022-4492.svg" alt="CVE-2022-4492"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-03-12.