Search for packages
| purl | pkg:maven/org.wildfly.core/wildfly-core-parent@3.0.0.Beta20 |
| Next non-vulnerable version | 17.0.0.Final |
| Latest non-vulnerable version | 17.0.0.Final |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-q6t7-9mjk-7fdd
Aliases: CVE-2021-3717 GHSA-p9xf-3rm3-qh2h |
Wildfly-Core user account mismanagement A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability. This flaw affects wildfly-core versions prior to 17.0. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-zau2-npbt-dqaf
Aliases: CVE-2019-14838 GHSA-82v2-f875-73g9 |
Wildfly Authorization Misconfiguration A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||