CVE-2020-14317

2021-06-0211:27:39

CWE-364

redhat

www.cve.org

4.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing regression. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.

CNA Affected

[
  {
    "product": "Wildfly",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "will not be fixed"
      }
    ]
  }
]