~ / search / GHSA-p9cf-qjxq-vxw6

GHSA-p9cf-qjxq-vxw6

Privilege Context Switching Error in wildlfy

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-1719

Packages

EcosystemPackageAffectedFixed in
Maven org.wildfly.bom:wildfly < 20.0.0.Final 20.0.0.Final

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

References

External links from the advisory. They lead to third-party sites.