CVE-2022-0084: Red Hat Integration Camel K

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.

Affected products

• Red Hat Integration Camel K: affected versions not specified
• Red Hat Integration Camel Quarkus: affected versions not specified
• Red Hat Single Sign-On: version 7.0 only
• Red Hat Xnio: before 3.8.7 (fixed in 3.8.7)

Published 2022-08-26. Last modified 2026-06-17.