Red Hat Wildfly-Security-Manager vulnerabilities

1 known vulnerability affecting red_hat/wildfly-security-manager.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-14843HIGHCVSS 8.8vAs shipped with Red Hat Jboss EAP 7 and Red Hat SSO 72020-01-07

CVE-2019-14843 [HIGH] CWE-592 CVE-2019-14843: A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests fo A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss EAP 7 and Red Hat SSO 7 are vulnerable to this issue.