Not rated
CVE-2020-1748 A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the…
Description
A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wildfly | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Wildfly
The 13 CVEs of Wildfly →
CVE-2022-1278
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload…
Not rated
CVE-2021-3717
A flaw was found in Wildfly
Not rated
CVE-2022-0866
This is a concurrency issue that can result in the wrong caller principal being returned from the session context of…
Not rated
CVE-2021-3503
A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data
Not rated