Medium severity5.3OSV Advisory· Published Sep 4, 2018· Updated Jun 17, 2026

CVE-2018-14627

Description

The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections:

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wildfly/WildflyOSV
Range: 10.0.0.Alpha1, 10.0.0.Alpha2, 10.0.0.Alpha3, …
Red Hat/WildFlyllm-fuzzy
Range: <14.0.0

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
access.redhat.com/errata/RHSA-2018:3527nvdThird Party Advisory
access.redhat.com/errata/RHSA-2018:3528nvdThird Party Advisory
access.redhat.com/errata/RHSA-2018:3529nvdThird Party Advisory
access.redhat.com/errata/RHSA-2018:3595nvdThird Party Advisory
issues.jboss.org/browse/WFLY-9107nvdThird Party Advisory
security.netapp.com/advisory/ntap-20181221-0002/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000