Rezultati pretraživanja za 'Proizvođač: wildfly'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-14887 | 6.4 | A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version | 2021-11-02 18:10:00 | 2020-03-16 15:15:00 |
| CVE-2020-1719 | 5.5 | A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0 | 2021-06-16 15:17:00 | 2021-06-07 17:15:00 |
| CVE-2020-14317 | 4.9 | It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing regression. An attacker could exploit this by modifying the PID file i | 2021-06-10 19:34:00 | 2021-06-02 12:15:00 |
| CVE-2021-3536 | 3.5 | A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity. | 2021-05-26 15:02:00 | 2021-05-20 13:15:00 |
| CVE-2020-27822 | 7.1 | A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an at | 2020-12-14 19:22:00 | 2020-12-08 01:15:00 |
| CVE-2019-3805 | 4.7 | A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss | 2020-10-16 16:04:00 | 2019-05-03 20:29:00 |
| CVE-2019-3894 | 6.5 | It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not necessarily terminate if the keep alive time has not expired. This could all | 2020-10-15 19:50:00 | 2019-05-03 20:29:00 |
| CVE-2020-10718 | 5.0 | A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader (TCCL). This setting is exposed as a public method, which can bypass the security manage | 2020-09-22 18:52:00 | 2020-09-16 19:15:00 |
| CVE-2018-14627 | 4.3 | The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <trans | 2019-10-03 00:03:00 | 2018-09-04 12:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: