CVE-2019-14838CWE-284

A flaw was found in wildfly-core before 7.2.5.GA

Medium · published October 14, 2019

CVSS v3.0
5.2
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server

The record
Technical detail
CVSS v3.0
5.2 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.01141 · 66.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-10-14T14:32Z
EPSS history
Timeline
  • 14 OCT 14:32Z
    A flaw was found in wildfly-core before 7.2.5.GA
    cvelistv5