GitHub Advisoryadvisory · Maven

GHSA-p9cf-qjxq-vxw6 Privilege Context Switching Error in wildlfy

MEDIUM Published 2021-06-08 Modified 2021-06-17 Official page ↗

Aliases: CVE-2020-1719
Ecosystem: Maven
Packages: org.wildfly.bom:wildfly
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses: CWE-270
Reviewed: 2021-06-08

Affected packages

• Maven org.wildfly.bom:wildfly: < 20.0.0.Final → fixed in 20.0.0.Final

Description

A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

Alias · CVE (1)

CVE-2020-1719 A flaw was found in wildfly. vulnerability

Weakness · CWE (1)

CWE-270 Privilege Context Switching Error weakness

References