CVE-2018-14627

Опубликовано: 04 сент. 2018

Источник: nvd

CVSS3: 5.3

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections:

Ссылки

https://access.redhat.com/errata/RHSA-2018:3527
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3528
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3529
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3595
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627
Issue Tracking
Patch
Third Party Advisory
https://issues.jboss.org/browse/WFLY-9107
Third Party Advisory
https://security.netapp.com/advisory/ntap-20181221-0002/
https://access.redhat.com/errata/RHSA-2018:3527
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3528
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3529
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3595
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627
Issue Tracking
Patch
Third Party Advisory
https://issues.jboss.org/browse/WFLY-9107
Third Party Advisory
https://security.netapp.com/advisory/ntap-20181221-0002/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:wildfly:*:*:*:*:*:*:*:*

Версия до 14.0.0 (исключая)

EPSS

Процентиль: 47%

0.0024

Низкий

5.3 Medium

CVSS3

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-319

Связанные уязвимости

CVE-2018-14627

CVSS3: 5.3

redhat

больше 8 лет назад

CVE-2018-14627

CVSS3: 5.3

debian

больше 7 лет назад

The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not h ...

GHSA-x5xm-f46c-5cpq

CVSS3: 5.9

github

больше 3 лет назад

EPSS

Процентиль: 47%

0.0024

Низкий

5.3 Medium

CVSS3

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-319