Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-1719

Опубликовано: 18 июн. 2019
Источник: redhat
CVSS3: 4.2
EPSS Низкий

Описание

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Decision Manager 7wildflyNot affected
Red Hat JBoss Data Virtualization 6jbossasOut of support scope
Red Hat JBoss Data Virtualization 6wildflyOut of support scope
Red Hat JBoss Enterprise Application Platform 5jbossasOut of support scope
Red Hat JBoss Enterprise Application Platform 6jbossasOut of support scope
Red Hat JBoss Fuse 6wildflyOut of support scope
Red Hat JBoss Operations Network 3wildflyOut of support scope
Red Hat JBoss SOA Platform 5jbossasOut of support scope
Red Hat OpenShift Application RuntimeswildflyOut of support scope
Red Hat Process Automation 7wildflyNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-270
https://bugzilla.redhat.com/show_bug.cgi?id=1796617Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain

EPSS

Процентиль: 32%
0.00122
Низкий

4.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
nvd
больше 4 лет назад

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

CVSS3: 5.4
debian
больше 4 лет назад

A flaw was found in wildfly. The EJBContext principle is not popped ba ...

CVSS3: 5.4
github
больше 4 лет назад

Privilege Context Switching Error in wildlfy

EPSS

Процентиль: 32%
0.00122
Низкий

4.2 Medium

CVSS3

Уязвимость CVE-2020-1719