CVE Feed

    Dashboard / CVE / CVE-2019-14838

    CVE-2019-14838

    A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server

    Published:Oct 11, 2019
    Last Modified:Nov 21, 2024
    EPS:Oct 14, 2019
    EPSS Score:0.00402
    CVSS Score:4.9

    Affected Products

    Vendor
    Redhat
    Product
    Data Grid
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Jboss Data Grid
    Vendor
    Redhat
    Product
    Jboss Enterprise Application Platform
    Vendor
    Redhat
    Product
    Jboss Enterprise Application Platform Cd
    Vendor
    Redhat
    Product
    Jboss Single Sign On
    Vendor
    Redhat
    Product
    Openshift Application Runtimes
    Vendor
    Redhat
    Product
    Red Hat Single Sign On
    Vendor
    Redhat
    Product
    Single Sign-on
    Vendor
    Redhat
    Product
    Wildfly Core

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-15573 (CVSS 8.1) — A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to…
    CVE-2026-16102 (CVSS 8.1) — A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access manage…
    CVE-2026-16105 (CVSS 4.9) — A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-bas…
    CVE-2026-18570 (CVSS 5.4) — A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. Thi…
    CVE-2026-18571 (CVSS 6.6) — A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) i…
    CVE-2026-18572 (CVSS 6.5) — Keycloak provides authorization services that allow administrators to restrict access to resources based on ti…
    CVE-2026-18201 (CVSS 5.5) — Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw …
    CVE-2026-18203 (CVSS 6.5) — A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution.…
    CVE-2026-18206 (CVSS 3.7) — A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management…
    CVE-2026-18207 (CVSS 6.5) — A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system chec…

    References

    https://access.redhat.com/errata/RHSA-2019:3082
    https://access.redhat.com/errata/RHSA-2019:3083
    https://access.redhat.com/errata/RHSA-2019:4018
    https://access.redhat.com/errata/RHSA-2019:4019
    https://access.redhat.com/errata/RHSA-2019:4020
    https://access.redhat.com/errata/RHSA-2019:4021
    https://access.redhat.com/errata/RHSA-2019:4040
    https://access.redhat.com/errata/RHSA-2019:4041
    https://access.redhat.com/errata/RHSA-2019:4042
    https://access.redhat.com/errata/RHSA-2019:4045
    https://access.redhat.com/errata/RHSA-2020:0728
    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14838
    https://access.redhat.com/errata/RHSA-2019:3082
    https://access.redhat.com/errata/RHSA-2019:3083
    https://access.redhat.com/errata/RHSA-2019:4018
    https://access.redhat.com/errata/RHSA-2019:4019
    https://access.redhat.com/errata/RHSA-2019:4020
    https://access.redhat.com/errata/RHSA-2019:4021
    https://access.redhat.com/errata/RHSA-2019:4040
    https://access.redhat.com/errata/RHSA-2019:4041
    https://access.redhat.com/errata/RHSA-2019:4042
    https://access.redhat.com/errata/RHSA-2019:4045
    https://access.redhat.com/errata/RHSA-2020:0728
    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14838

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High