Svi
Pretraži prema proizvođaču
Pretraži prema CWE oznaci
O usluzi
Pretplate
Jezik
hr
en
CVE-2014-8122 - CERT CVE
CVE-2014-8122
ID
CVE-2014-8122
Sažetak
Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.
Reference
http://rhn.redhat.com/errata/RHSA-2015-0215.html
http://rhn.redhat.com/errata/RHSA-2015-0216.html
http://rhn.redhat.com/errata/RHSA-2015-0217.html
http://rhn.redhat.com/errata/RHSA-2015-0218.html
http://rhn.redhat.com/errata/RHSA-2015-0675.html
http://rhn.redhat.com/errata/RHSA-2015-0773.html
http://rhn.redhat.com/errata/RHSA-2015-0850.html
http://rhn.redhat.com/errata/RHSA-2015-0851.html
http://rhn.redhat.com/errata/RHSA-2015-0920.html
http://www.securityfocus.com/bid/74252
http://www.securitytracker.com/id/1031741
https://exchange.xforce.ibmcloud.com/vulnerabilities/100892
https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml
https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745
https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086
https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65
CVSS
Base:
4.3
Impact:
2.9
Exploitability:
8.6
Pristup
Vektor
Složenost
Autentikacija
NETWORK
MEDIUM
NONE
Impact
Povjerljivost
Cjelovitost
Dostupnost
PARTIAL
NONE
NONE
CVSS vektor
AV:N/AC:M/Au:N/C:P/I:N/A:N
Zadnje važnije ažuriranje
08-09-2017 - 01:29
Objavljeno
13-02-2015 - 15:59