Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2019-14838

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server

VectorNETWORK

PublishedOct 14, 2019, 15:15

Published Bysecalert@redhat.com

Base Score

Score4.9

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.wildfly.core:wildfly-host-controller(Maven)07.2.5.GAN/A

References

https://access.redhat.com/errata/RHSA-2019:3082
https://access.redhat.com/errata/RHSA-2019:3083
https://access.redhat.com/errata/RHSA-2019:4018
https://access.redhat.com/errata/RHSA-2019:4019
https://access.redhat.com/errata/RHSA-2019:4020
https://access.redhat.com/errata/RHSA-2019:4021
https://access.redhat.com/errata/RHSA-2019:4040
https://access.redhat.com/errata/RHSA-2019:4041
https://access.redhat.com/errata/RHSA-2019:4042
https://access.redhat.com/errata/RHSA-2019:4045
https://access.redhat.com/errata/RHSA-2020:0728
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14838

Weakness Type

CWE-269

CVSS Metrics

Base Score

4.9

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK