← Retour aux CVEs
CVE-2014-0169
MEDIUM6.5
Description
In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the security domain. This could allow an authenticated user in one application to access protected resources in another application without proper authorization. Although this is an intended functionality, it was not clearly documented which can mislead users into thinking that a security domain cache is isolated to a single application.
Details CVE
Score CVSS v3.16.5
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisLOW
Interaction utilisateurNONE
Publie1/2/2020
Derniere modification11/21/2024
Sourcenvd
Observations honeypot0
Produits affectes
redhat:jboss_enterprise_application_platform
Faiblesses (CWE)
CWE-863
References
https://access.redhat.com/security/cve/cve-2014-0169(secalert@redhat.com)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0169(secalert@redhat.com)
https://access.redhat.com/security/cve/cve-2014-0169(af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0169(af854a3a-2127-422b-91ae-364da2661108)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.