Aller au contenu
Se connecter
Non notée

CVE-2020-10714 A flaw was found in WildFly Elytron version 1.11.3.Final and before

Description

A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Produits et versions touchés

Produit Versions touchées Corrigé en
wildfly-elytron Versions non publiées

Autres CVE de wildfly-elytron

Les 2 CVE de wildfly-elytron →
CVE-2021-3642 A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to… Non notée
Suivre cette CVE