VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 12, 2018· Updated Jun 17, 2026

CVE-2017-6910

CVE-2017-6910

Description

The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS Edition before 4.0.5 hotfix-15, 4.0.6 before hotfix-4, 4.0.7, 4.0.9 before hotfix-19, 4.4.x before 4.4.2 hotfix-1, 4.5.x before 4.5.3 hotfix-1, and Gateway Community and Enterprise Editions before 5.6.0 allow remote attackers to bypass intended access restrictions and obtain sensitive information via vectors related to HTTP request handling.

Affected products

14
  • Kaazing/Gatewayinferred12 versions
    <5.6.0+ 11 more
    • (no CPE)range: <5.6.0
    • cpe:2.3:a:kaazing:kaazing_gateway:*:*:*:*:*:*:*:*range: <4.5.3
    • cpe:2.3:a:kaazing:kaazing_gateway:*:*:*:*:jms:*:*:*range: >=4.5.0,<4.5.3
    • cpe:2.3:a:kaazing:kaazing_gateway:*:hotfix1:*:*:jms:*:*:*range: >=4.4.0,<4.4.2
    • cpe:2.3:a:kaazing:kaazing_gateway:4.0.5:*:*:*:jms:*:*:*
    • cpe:2.3:a:kaazing:kaazing_gateway:4.0.6:*:*:*:jms:*:*:*
    • cpe:2.3:a:kaazing:kaazing_gateway:4.0.6:hotfix2:*:*:jms:*:*:*
    • cpe:2.3:a:kaazing:kaazing_gateway:4.0.7:*:*:*:jms:*:*:*
    • cpe:2.3:a:kaazing:kaazing_gateway:4.4.2:hotfix1:*:*:jms:*:*:*
    • cpe:2.3:a:kaazing:kaazing_gateway:4.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:kaazing:kaazing_gateway:4.5.3:hotfix1:*:*:*:*:*:*
    • cpe:2.3:a:kaazing:kaazing_gateway:4.5.3:hotfix1:*:*:jms:*:*:*
  • Tenefit/Kaazing Websocket Gateway2 versions
    cpe:2.3:a:tenefit:kaazing_websocket_gateway:*:*:*:*:community:*:*:*+ 1 more
    • cpe:2.3:a:tenefit:kaazing_websocket_gateway:*:*:*:*:community:*:*:*range: <5.6.0
    • cpe:2.3:a:tenefit:kaazing_websocket_gateway:*:*:*:*:enterprise:*:*:*range: <5.6.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.