CAIQUM-9250: CVE-2023-1108: High CPU usage and GUI unresponsiveness on AIQUM 9.18 due to vulnerable Undertow 2.3.0.Final
Issue
After upgrading to Active IQ Unified Manager (AIQUM) 9.18 or later, the following symptoms may occur:
- High CPU usage on the AIQUM Java/JBoss process.
- A single Undertow worker thread, for example
default I/O-2, continuously consumes approximately 100% of one CPU core. - The AIQUM Web GUI is slow or partially unresponsive.
- The condition does not self-resolve and may require a service restart to recover.
audit-log.loggrows excessively during vulnerability scanning and may result in insufficient disk space.- The issue may start after upgrading to AIQUM 9.18P2D2.
