GitHub Advisoryadvisory · Maven
GHSA-82v2-f875-73g9 Wildfly Authorization Misconfiguration
MEDIUM
Official page ↗
- Aliases
- CVE-2019-14838
- Ecosystem
- Maven
- Packages
- org.wildfly.core:wildfly-host-controller
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-284
- Reviewed
- 2023-07-18
Affected packages
• Maven org.wildfly.core:wildfly-host-controller: < 7.2.5.GA → fixed in 7.2.5.GA
Description
A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server
Related
Alias · CVE (1)
- CVE-2019-14838 A flaw was found in wildfly-core before 7.2.5.GA. vulnerability
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2019-14838 advisory
- https://github.com/wildfly/wildfly-core/pull/3981 web
- https://github.com/wildfly/wildfly-core/commit/131fa6880ae1523fac9e96df54dc394b63b0eed3 web
- https://access.redhat.com/errata/RHSA-2019:3082 web
- https://access.redhat.com/errata/RHSA-2019:3083 web
- https://access.redhat.com/errata/RHSA-2019:4018 web
- https://access.redhat.com/errata/RHSA-2019:4019 web
- https://access.redhat.com/errata/RHSA-2019:4020 web
- https://access.redhat.com/errata/RHSA-2019:4021 web
- https://access.redhat.com/errata/RHSA-2019:4040 web
- https://access.redhat.com/errata/RHSA-2019:4041 web
- https://access.redhat.com/errata/RHSA-2019:4042 web
- https://access.redhat.com/errata/RHSA-2019:4045 web
- https://access.redhat.com/errata/RHSA-2020:0728 web
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14838 web
- https://github.com/wildfly/wildfly-core package