Non notée
CVE-2020-1748 A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the…
Description
A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wildfly | Versions non publiées |
Autres CVE de Wildfly
Les 13 CVE de Wildfly →
CVE-2022-1278
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload…
Non notée
CVE-2021-3717
A flaw was found in Wildfly
Non notée
CVE-2022-0866
This is a concurrency issue that can result in the wrong caller principal being returned from the session context of…
Non notée
CVE-2021-3503
A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data
Non notée