CVE-2024-1635: active iq unified manager Version not applicable in the source CPE; +37 more affected products

Affected technology

active iq unified manager · Version not applicable in the source CPE
netapp

oncommand workflow automation · Version not applicable in the source CPE
netapp

fuse · 1.0
redhat

integration camel for spring boot · Version not applicable in the source CPE
redhat

jboss enterprise application platform · 7.4
redhat

openshift container platform · 4.11
redhat

openshift container platform · 4.12
redhat

openshift container platform for linuxone · 4.9
redhat

openshift container platform for linuxone · 4.10
redhat

openshift container platform for power · 4.9
redhat

openshift container platform for power · 4.10
redhat

single sign-on · Version not applicable in the source CPE
redhat

single sign-on · 7.6
redhat

Product not specified by the source · 1.31.0
Vendor not specified by the source

Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2 · Exact affected versions not specified by the source
Red Hat

Red Hat Fuse 7.13.0 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4.16 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Single Sign-On 7.6 for RHEL 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Single Sign-On 7.6 for RHEL 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Single Sign-On 7.6 for RHEL 9 · Exact affected versions not specified by the source
Red Hat

RHEL-8 based Middleware Containers · Exact affected versions not specified by the source
Red Hat

RHSSO 7.6.8 · Exact affected versions not specified by the source
Red Hat

OpenShift Serverless · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel 4 for Quarkus 3 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel for Spring Boot 3 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apache Camel for Spring Boot 4 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Apicurio Registry 2 · Exact affected versions not specified by the source
Red Hat

Red Hat Build of Keycloak · Exact affected versions not specified by the source
Red Hat

Red Hat build of OptaPlanner 8 · Exact affected versions not specified by the source
Red Hat

Red Hat build of Quarkus · Exact affected versions not specified by the source
Red Hat

Red Hat Data Grid 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Integration Camel K 1 · Exact affected versions not specified by the source
Red Hat

Red Hat Integration Camel Quarkus 2 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Data Grid 7 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Enterprise Application Platform 8 · Exact affected versions not specified by the source
Red Hat

Red Hat JBoss Fuse Service Works 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Process Automation 7 · Exact affected versions not specified by the source
Red Hat

streams for Apache Kafka · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.