Skip to content
Sign in
Not rated

CVE-2020-10714 A flaw was found in WildFly Elytron version 1.11.3.Final and before

Description

A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected products and versions

Product Affected versions Fixed in
wildfly-elytron Versions not published

Other CVEs of wildfly-elytron

The 2 CVEs of wildfly-elytron →
CVE-2021-3642 A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to… Not rated
Track this CVE