CVE & CISA-KEV CatalogNVD
CVE-2024-12397
HIGH7.4
CVSS v3
Description
A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
How to fix
Remediation Available
cryostat/cryostatRocky
Fixed in:operator-bundle@sha256:81ee88fd6f65c9b44a36a09de0447e40629543fba9abe1a5cf2e78cde00f1ccc_amd64RHSA-2025:3018
Fixed in:rhel9@sha256:e94b6a56bbe9bd8f044ebd705cd47310117bc62b64eca2e08fca86796c80c9c5_amd64RHSA-2025:3018
Fixed in:reports-rhel9@sha256:1e88b804f39b1cbe9e6e1999e50f80bb12799f6b2eba0183edf0540a8e9b0703_amd64RHSA-2025:3018
Fixed in:rhel9-operator@sha256:46e5e55899c96097c5ba9dd9a592117206bcba074dfe53c31bb008280219b06a_arm64RHSA-2025:3018
Fixed in:operator-bundle@sha256:91691fbffedd771a20e15f828dece6aa97497eb152ba6226a3446a63a3295ae0_arm64RHSA-2025:3018
Fixed in:rhel9@sha256:88acd1caf027c645b53d31f2358d9ca916697b3b5e0babfd91b4c91417a49816_arm64RHSA-2025:3018
Fixed in:reports-rhel9@sha256:d2b35aa90a36f7ea5bad2189270a13ab819243e591f054163cf32cb247d9d053_arm64RHSA-2025:3018
Fixed in:db-rhel9@sha256:e65d22a2f788ebd83fd3b89b5f86ac0c5901f318a638639da3fbf68749c02da9_arm64RHSA-2025:3018
Fixed in:storage-rhel9@sha256:13650189a745f238d6aa60edfef308e81a21fc0c015f88050a98287a94e89534_amd64RHSA-2025:3018
Fixed in:rhel9-operator@sha256:bdffb2fe3d29ec49e2bfda1c1b2d90e787e813c3420c6a903e8172a9d5a7553f_amd64RHSA-2025:3018
Fixed in:storage-rhel9@sha256:d2329bf9a5775f8d63bdb8e10e5dc4bbdaf8625eba178ade097c3f415bf758a1_arm64RHSA-2025:3018
Fixed in:db-rhel9@sha256:3c7dc1ac6f51b9f34e2fb8298778ff137b422b745efa6f2e8fc6dd4495565ee9_amd64RHSA-2025:3018
cryostat/cryostatRed Hat / RHEL
Fixed in:reports-rhel9@sha256:1e88b804f39b1cbe9e6e1999e50f80bb12799f6b2eba0183edf0540a8e9b0703_amd64RHSA-2025:3018
Fixed in:rhel9@sha256:e94b6a56bbe9bd8f044ebd705cd47310117bc62b64eca2e08fca86796c80c9c5_amd64RHSA-2025:3018
Fixed in:operator-bundle@sha256:81ee88fd6f65c9b44a36a09de0447e40629543fba9abe1a5cf2e78cde00f1ccc_amd64RHSA-2025:3018
Fixed in:rhel9-operator@sha256:bdffb2fe3d29ec49e2bfda1c1b2d90e787e813c3420c6a903e8172a9d5a7553f_amd64RHSA-2025:3018
Fixed in:storage-rhel9@sha256:13650189a745f238d6aa60edfef308e81a21fc0c015f88050a98287a94e89534_amd64RHSA-2025:3018
Fixed in:db-rhel9@sha256:3c7dc1ac6f51b9f34e2fb8298778ff137b422b745efa6f2e8fc6dd4495565ee9_amd64RHSA-2025:3018
Fixed in:db-rhel9@sha256:e65d22a2f788ebd83fd3b89b5f86ac0c5901f318a638639da3fbf68749c02da9_arm64RHSA-2025:3018
Fixed in:reports-rhel9@sha256:d2b35aa90a36f7ea5bad2189270a13ab819243e591f054163cf32cb247d9d053_arm64RHSA-2025:3018
Fixed in:rhel9@sha256:88acd1caf027c645b53d31f2358d9ca916697b3b5e0babfd91b4c91417a49816_arm64RHSA-2025:3018
Fixed in:operator-bundle@sha256:91691fbffedd771a20e15f828dece6aa97497eb152ba6226a3446a63a3295ae0_arm64RHSA-2025:3018
Fixed in:rhel9-operator@sha256:46e5e55899c96097c5ba9dd9a592117206bcba074dfe53c31bb008280219b06a_arm64RHSA-2025:3018
Fixed in:storage-rhel9@sha256:d2329bf9a5775f8d63bdb8e10e5dc4bbdaf8625eba178ade097c3f415bf758a1_arm64RHSA-2025:3018
cryostat/cryostat-agentRocky
Fixed in:init-rhel9@sha256:f7525608cc83f31d1b3e3de10e84d513a53d2eef424473f05da3d805fcddeaf6_arm64RHSA-2025:3018
Fixed in:init-rhel9@sha256:07378afcbcb24757bd75cc7ffa542fed10fb1f906b20b3a7fc0116992a7cc291_amd64RHSA-2025:3018
cryostat/cryostat-agentRed Hat / RHEL
Fixed in:init-rhel9@sha256:f7525608cc83f31d1b3e3de10e84d513a53d2eef424473f05da3d805fcddeaf6_arm64RHSA-2025:3018
Fixed in:init-rhel9@sha256:07378afcbcb24757bd75cc7ffa542fed10fb1f906b20b3a7fc0116992a7cc291_amd64RHSA-2025:3018
cryostat/cryostat-grafanaRocky
Fixed in:dashboard-rhel9@sha256:cf48c6abdba3a58089dd0117c45a5fa4072622cbaa7b471eb3e5d8c1b138e051_arm64RHSA-2025:3018
Fixed in:dashboard-rhel9@sha256:b02b9a47520258cfc2bbf34cc20eb8165ef6fc7b675b08b20946a8ea9aef0d9e_amd64RHSA-2025:3018
cryostat/cryostat-grafanaRed Hat / RHEL
Fixed in:dashboard-rhel9@sha256:b02b9a47520258cfc2bbf34cc20eb8165ef6fc7b675b08b20946a8ea9aef0d9e_amd64RHSA-2025:3018
Fixed in:dashboard-rhel9@sha256:cf48c6abdba3a58089dd0117c45a5fa4072622cbaa7b471eb3e5d8c1b138e051_arm64RHSA-2025:3018
cryostat/cryostat-openshift-consoleRocky
Fixed in:plugin-rhel9@sha256:5b7c5adac17138967cba825d5e37949a50407862fc65f4fd3354f6a366ae043c_amd64RHSA-2025:3018
Fixed in:plugin-rhel9@sha256:e98148dc400ff08ac862f24049ff772294a24cabfc38fa53acfdaa1526e1d0b5_arm64RHSA-2025:3018
cryostat/cryostat-openshift-consoleRed Hat / RHEL
Fixed in:plugin-rhel9@sha256:e98148dc400ff08ac862f24049ff772294a24cabfc38fa53acfdaa1526e1d0b5_arm64RHSA-2025:3018
Fixed in:plugin-rhel9@sha256:5b7c5adac17138967cba825d5e37949a50407862fc65f4fd3354f6a366ae043c_amd64RHSA-2025:3018
cryostat/cryostat-ose-oauthRed Hat / RHEL
Fixed in:proxy-rhel9@sha256:53646fbdfb95a922c4bae057e34482f6487cdfb5ea3437a3f1a40aa636625884_amd64RHSA-2025:3018
Fixed in:proxy-rhel9@sha256:e8a94edcab7e2a57f978b4bb163fb48584a42e133723fb9879f38e6be21be24a_arm64RHSA-2025:3018
cryostat/cryostat-ose-oauthRocky
Fixed in:proxy-rhel9@sha256:53646fbdfb95a922c4bae057e34482f6487cdfb5ea3437a3f1a40aa636625884_amd64RHSA-2025:3018
Fixed in:proxy-rhel9@sha256:e8a94edcab7e2a57f978b4bb163fb48584a42e133723fb9879f38e6be21be24a_arm64RHSA-2025:3018
cryostat/jfrRocky
Fixed in:datasource-rhel9@sha256:ee93d84a6f61b329d740921245723cfbca3a9581fa163a874202f7f544d97c85_amd64RHSA-2025:3018
Fixed in:datasource-rhel9@sha256:fd595c816d4b80536115a43b74aa55e3be7936e5be0276899dfd13ad763a1408_arm64RHSA-2025:3018
cryostat/jfrRed Hat / RHEL
Fixed in:datasource-rhel9@sha256:ee93d84a6f61b329d740921245723cfbca3a9581fa163a874202f7f544d97c85_amd64RHSA-2025:3018
Fixed in:datasource-rhel9@sha256:fd595c816d4b80536115a43b74aa55e3be7936e5be0276899dfd13ad763a1408_arm64RHSA-2025:3018
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploit Intelligence
0.75%probability of exploitation in 30 days
51stpercentile
Moderate risk: more likely to be exploited than 51% of all known CVEs.
References
Related Vulnerabilities
Other CWE-444 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2022-22536 | Critical | 10.0 | 98% | KEV | - |
| CVE-2025-61884 | High | 7.5 | 98% | KEV + Ransom | - |
| CVE-2020-9490 | High | 7.5 | 90% | - | Fix |
| CVE-2023-41265 | Critical | 9.6 | 85% | KEV + Ransom | - |
| CVE-2023-25690 | Critical | 9.8 | 84% | - | Fix |
| CVE-2022-32214 | Medium | 6.5 | 78% | - | Fix |
Embed a live status badge for CVE-2024-12397
Markdown
[](https://tridentstack.com/cve/CVE-2024-12397)HTML
<a href="https://tridentstack.com/cve/CVE-2024-12397"><img src="https://tridentstack.com/cve/badge/CVE-2024-12397.svg" alt="CVE-2024-12397"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-06-10.