Non notée
CVE-2020-10718 A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an…
Description
A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader (TCCL). This setting is exposed as a public method, which can bypass the security manager. The highest threat from this vulnerability is to confidentiality.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wildfly | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Wildfly
Les 13 CVE de Wildfly →
CVE-2022-1278
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload…
Non notée
CVE-2021-3717
A flaw was found in Wildfly
Non notée
CVE-2022-0866
This is a concurrency issue that can result in the wrong caller principal being returned from the session context of…
Non notée
CVE-2021-3503
A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data
Non notée