Wildfly-Core user account mismanagement

2022-05-2500:00:22

Google

osv.dev

0.0004 Low

EPSS

Percentile

12.6%

JSON

A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability. This flaw affects wildfly-core versions prior to 17.0.

CPENameOperatorVersion
org.wildfly.core:wildfly-core-parenteq6.0.2.Final
org.wildfly.core:wildfly-core-parenteq5.0.0.Beta2
org.wildfly.core:wildfly-core-parenteq5.0.0.Beta5
org.wildfly.core:wildfly-core-parenteq3.0.3.Final
org.wildfly.core:wildfly-core-parenteq3.0.0.Beta15
org.wildfly.core:wildfly-core-parenteq3.0.0.Beta24
org.wildfly.core:wildfly-core-parenteq12.0.1.Final
org.wildfly.core:wildfly-core-parenteq1.0.0.Alpha5
org.wildfly.core:wildfly-core-parenteq3.1.0.Final
org.wildfly.core:wildfly-core-parenteq16.0.0.Beta1

Name	Operator	Version
org.wildfly.core:wildfly-core-parent	eq	6.0.2.Final
org.wildfly.core:wildfly-core-parent	eq	5.0.0.Beta2
org.wildfly.core:wildfly-core-parent	eq	5.0.0.Beta5
org.wildfly.core:wildfly-core-parent	eq	3.0.3.Final
org.wildfly.core:wildfly-core-parent	eq	3.0.0.Beta15
org.wildfly.core:wildfly-core-parent	eq	3.0.0.Beta24
org.wildfly.core:wildfly-core-parent	eq	12.0.1.Final
org.wildfly.core:wildfly-core-parent	eq	1.0.0.Alpha5
org.wildfly.core:wildfly-core-parent	eq	3.1.0.Final
org.wildfly.core:wildfly-core-parent	eq	16.0.0.Beta1