CVSS 3.1
4.9 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NCVE-2019-14838
Medium (4.9) in redhat. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in org.wildfly.core:wildfly-host-controller 7.2.5.GA.
A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-269, CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:data_grid
- redhat:jboss_enterprise_application_platform
- redhat:single_sign-on
- redhat:wildfly_core
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-82v2-f875-73g9 | Maven | org.wildfly.core:wildfly-host-controller | <7.2.5.GA | 7.2.5.GA |