Authorization Bypass

2019-10-1600:21:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

60.2%

JSON

wildfly-core is vulnerable to authorization bypass. The vulnerability exists as incorrect privileges for ‘Monitor’, ‘Auditor’ and ‘Deployer’ user were given by default.

CPENameOperatorVersion
eap7-wildflyeq7.1.3__4.GA_redhat_3.1.ep7.el7
eap7-wildflyeq7.0.7__4.GA_redhat_3.1.ep7.el6
eap7-wildflyeq7.0.8__4.GA_redhat_1.1.ep7.el7
eap7-wildflyeq7.0.2__2.GA_redhat_1.1.ep7.el7
eap7-wildflyeq7.0.4__4.GA_redhat_2.1.ep7.el6
eap7-wildflyeq7.1.3__2.GA_redhat_2.1.ep7.el7
eap7-wildflyeq7.1.1__4.GA_redhat_2.1.ep7.el7
eap7-wildflyeq7.1.3__4.GA_redhat_3.1.ep7.el6
eap7-wildflyeq7.0.6__4.GA_redhat_2.1.ep7.el6
eap7-wildflyeq7.1.3__2.GA_redhat_2.1.ep7.el6

Name	Operator	Version
eap7-wildfly	eq	7.1.3__4.GA_redhat_3.1.ep7.el7
eap7-wildfly	eq	7.0.7__4.GA_redhat_3.1.ep7.el6
eap7-wildfly	eq	7.0.8__4.GA_redhat_1.1.ep7.el7
eap7-wildfly	eq	7.0.2__2.GA_redhat_1.1.ep7.el7
eap7-wildfly	eq	7.0.4__4.GA_redhat_2.1.ep7.el6
eap7-wildfly	eq	7.1.3__2.GA_redhat_2.1.ep7.el7
eap7-wildfly	eq	7.1.1__4.GA_redhat_2.1.ep7.el7
eap7-wildfly	eq	7.1.3__4.GA_redhat_3.1.ep7.el6
eap7-wildfly	eq	7.0.6__4.GA_redhat_2.1.ep7.el6
eap7-wildfly	eq	7.1.3__2.GA_redhat_2.1.ep7.el6