VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Oct 14, 2019· Updated Jun 17, 2026

CVE-2019-14838

CVE-2019-14838

Description

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.wildfly.core:wildfly-host-controllerMaven
< 7.2.5.GA7.2.5.GA

Affected products

16
  • Red Hat/wildfly-corev5
    Range: before 7.2.5.GA
  • ghsa-coords
    pkg:maven/org.wildfly.core/wildfly-host-controller
    Range: < 7.2.5.GA
  • Red Hat/Wildfly Core8 versions
    cpe:2.3:a:redhat:wildfly_core:7.0.0:-:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:redhat:wildfly_core:7.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:redhat:wildfly_core:7.0.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:redhat:wildfly_core:7.0.0:alpha2:*:*:*:*:*:*
    • cpe:2.3:a:redhat:wildfly_core:7.0.0:alpha3:*:*:*:*:*:*
    • cpe:2.3:a:redhat:wildfly_core:7.0.0:alpha4:*:*:*:*:*:*
    • cpe:2.3:a:redhat:wildfly_core:7.0.0:alpha5:*:*:*:*:*:*
    • cpe:2.3:a:redhat:wildfly_core:7.0.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:redhat:wildfly_core:7.0.0:cr1:*:*:*:*:*:*
  • Red Hat/Jboss Enterprise Application Platform4 versions
    cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.4:*:*:*:*:*:*:*
  • Red Hat/Single Sign On
    cpe:2.3:a:redhat:single_sign-on:7.3.5:*:*:*:*:*:*:*
  • Red Hat/DataGrid
    cpe:2.3:a:redhat:data_grid:7.3.4:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

16

News mentions

0

No linked articles in our index yet.