Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p9cf-qjxq-vxw6

Опубликовано: 08 июн. 2021
Источник: github
Github: Прошло ревью
CVSS3: 5.4

Описание

Privilege Context Switching Error in wildlfy

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

Пакеты

Наименование

org.wildfly.bom:wildfly

maven
Затронутые версииВерсия исправления

<= 19.1.0.Final

20.0.0.Final

EPSS

Процентиль: 32%
0.00122
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-270

Связанные уязвимости

CVSS3: 4.2
redhat
больше 6 лет назад

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

CVSS3: 5.4
nvd
больше 4 лет назад

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

CVSS3: 5.4
debian
больше 4 лет назад

A flaw was found in wildfly. The EJBContext principle is not popped ba ...

EPSS

Процентиль: 32%
0.00122
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-270