CVE-2019-14838

EPSS 0.4%
Published 14.10.2019 15:15:09
Last modified 21.11.2024 04:27:28
Source secalert@redhat.com
Teams watchlist Login
Open Login

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server

Affected products Warnungen 0 Metrics 4 CWE 2 References 15

Data is provided by the National Vulnerability Database (NVD)

Redhat ≫ Wildfly Core Version7.0.0 Update-

Redhat ≫ Wildfly Core Version7.0.0 Updatealpha1

Redhat ≫ Wildfly Core Version7.0.0 Updatealpha2

Redhat ≫ Wildfly Core Version7.0.0 Updatealpha3

Redhat ≫ Wildfly Core Version7.0.0 Updatealpha4

Redhat ≫ Wildfly Core Version7.0.0 Updatealpha5

Redhat ≫ Wildfly Core Version7.0.0 Updatebeta1

Redhat ≫ Wildfly Core Version7.0.0 Updatecr1

Redhat ≫ Jboss Enterprise Application Platform Version7.2.0

   Redhat ≫ Enterprise Linux Version6.0
   Redhat ≫ Enterprise Linux Version7.0
   Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Jboss Enterprise Application Platform Version7.2.5

   Redhat ≫ Enterprise Linux Version6.0
   Redhat ≫ Enterprise Linux Version7.0
   Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Jboss Enterprise Application Platform Version7.3.0

   Redhat ≫ Enterprise Linux Version6.0
   Redhat ≫ Enterprise Linux Version7.0
   Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Single Sign-on Version7.3.5

   Redhat ≫ Enterprise Linux Version6.0
   Redhat ≫ Enterprise Linux Version7.0
   Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Data Grid Version7.3.4

Redhat ≫ Jboss Enterprise Application Platform Version7.2.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.4%	0.578

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N
secalert@redhat.com	5.2	0.9	4.2	CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H