CVE-2014-8122

Weld: Limited information disclosure via stale thread state

Published Feb 13, 2015 CVSS 2.0 · 4.3 Medium EPSS 2.1% KEV · Not listed
Description
Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-0453 Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.
Github GHSA Github GHSA GHSA-338v-3958-8v8r Information disclosure in JBoss Weld
History

No history.