CVEvulnerability

CVE-2020-14297

6.5 MEDIUM Published 2020-07-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-400

Description

A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.

Affected configurations

• redhat amq 2.0 • redhat jboss-ejb-client (>= 1.0.0 < 4.0.34) • redhat jboss enterprise application platform continuous delivery • redhat jboss fuse 6.0.0 • redhat openshift application runtimes • redhat single sign-on 7.0

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References