5.5
Moyenne
CVE-2019-3805 A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d…
Description
A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| wildfly | Versions non publiées |
Autres CVE de wildfly
Les 5 CVE de wildfly →
CVE-2020-14297
A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction…
6.5
Moyenne
CVE-2020-14307
A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where…
6.5
Moyenne
CVE-2019-14887
A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly…
7.4
Élevée
CVE-2019-3894
It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a…
5.4
Moyenne