Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2014-8122

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2014-8122
Last Modified 13 May 2015 10:02:33
Published 13 Feb 2015 10:59:07
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2014-8122

Summary

Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.

Vulnerable Systems

Application

  • Redhat Jboss Weld 2.2.7

  • Redhat Jboss Weld 3.0.0


References

CONFIRM - https://github.com/weld/core/commit/8e413202fa1af08c09c580f444e4fd16874f9c65

CONFIRM - https://github.com/weld/core/commit/6808b11cd6d97c71a2eed754ed4f955acd789086

CONFIRM - https://github.com/weld/core/commit/29fd1107fd30579ad9bb23fae4dc3ba464205745

MISC - https://github.com/victims/victims-cve-db/blob/master/database/java/2014/8122.yaml

SECTRACK - 1031741

REDHAT - RHSA-2015:0218

REDHAT - RHSA-2015:0217

REDHAT - RHSA-2015:0216

REDHAT - RHSA-2015:0215

XF - redhat-jboss-cve20148122-info-disc(100892)

REDHAT - RHSA-2015:0675

REDHAT - RHSA-2015:0773

REDHAT - RHSA-2015:0851

REDHAT - RHSA-2015:0850

REDHAT - RHSA-2015:0920

BID - 74252


Last Updated: 27 May 2016 10:55:48