CVE-2022-0853

Опубликовано: 11 мар. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=2060725
Issue Tracking
Vendor Advisory
https://github.com/ByteHackr/CVE-2022-0853
Exploit
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2060725
Issue Tracking
Vendor Advisory
https://github.com/ByteHackr/CVE-2022-0853
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:descision_manager:7.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform_expansion_pack:-:*:*:*:*:*:*:*

cpe:2.3:a:redhat:process_automation:7.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01306

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-401

Связанные уязвимости

CVE-2022-0853

CVSS3: 6.5

redhat

почти 4 года назад

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

GHSA-f67w-c9w2-5v69

CVSS3: 7.5

github

почти 4 года назад

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

EPSS

Процентиль: 79%

0.01306

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-401