CVE-2020-1719

Wildfly: EJBContext principal is not popped back after invoking another EJB using a different Security Domain

Published Jun 7, 2021 CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Description
A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-1370 A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final are affected.
Github GHSA Github GHSA GHSA-p9cf-qjxq-vxw6 Privilege Context Switching Error in wildlfy
History

No history.