PT-2019-5278 · Red Hat · Jboss Eap+2
Chess Hazlett
·
Publicado
2019-09-17
·
Atualizado
2020-01-15
·
CVE-2019-14843
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Wildfly Security Manager versions shipped with Red Hat Jboss EAP 7 and Red Hat SSO 7
Description
The issue is related to inadequate access control in the Wildfly Security Manager, which can be exploited to gain access to protected information. A malicious application deployed on the application server could potentially use this flaw to access unauthorized information and conduct further attacks.
Recommendations
For versions shipped with Red Hat Jboss EAP 7 and Red Hat SSO 7, consider restricting access to sensitive information until a fix is available. As a temporary workaround, review and limit the deployment of applications on the server to minimize the risk of exploitation.
Correção
Incorrect Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Jboss Eap
Red Hat Sso
Wildfly Security Manager